signrelease.yml

name: Sign and Release Module

on:
  push:
    branches:
      - 'release/*'

jobs:
  sign_and_release_module:
    runs-on: ubuntu-latest

    steps:
    - name: Checkout code
      uses: actions/checkout@v2

    - name: Install GPG
      run: sudo apt-get update && sudo apt-get install gnupg -y

    - name: Import GPG key
      run: echo "${{ secrets.GPG_SIGNING_KEY }}" | base64 --decode | gpg --import

    - name: Extract version and rawname from module.xml
      run: |
        version=$(awk -F'[><]' '/<version>/{print $3}' /location/of/module/module.xml)
        rawname=$(awk -F'[><]' '/<rawname>/{print $3}' /location/of/module/module.xml)
        echo "::set-env name=version::$version"
        echo "::set-env name=rawname::$rawname"

    - name: Sign module
      run: |
        gpg --batch --yes --armor --detach-sign /location/of/module/$rawname-$version.tar.gz

    - name: Push signed module to releases
      uses: softprops/action-gh-release@v1
      with:
        files: /location/of/module/$rawname-$version.tar.gz.asc
        tag_name: v$version
        title: Release $version
        token: ${{ secrets.GITHUB_TOKEN }}