From 6e8b2d028170c1754bac2e44a47128efeeecdd86 Mon Sep 17 00:00:00 2001 From: Travis Raines <571832+rainest@users.noreply.github.com> Date: Mon, 1 Jun 2026 13:10:02 -0700 Subject: [PATCH] ci: remove bogus action test step Remove a CI step that was labeled test-actions that wasn't actually testing actions, and was broken due to lack of the required secret. Signed-off-by: Travis Raines <571832+rainest@users.noreply.github.com> --- .github/workflows/ci.yml | 64 ---------------------------------------- 1 file changed, 64 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 48b2fb9..428430d 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -12,67 +12,3 @@ jobs: - uses: actions/checkout@v4 - name: actionlint uses: raven-actions/actionlint@v2.0.1 - - test-actions: - runs-on: ubuntu-latest - steps: - - uses: actions/checkout@v4 - - name: Generate ephemeral key - id: gpg - uses: ./actions/gpg-ephemeral-key - with: - subkey-armored: ${{ secrets.GPG_SUBKEY_B64 }} - comment: test-ci - cleanup: false - - - name: Create test file - run: echo "This is a test payload" > test.txt - - - name: Sign test file with ephemeral key - run: | - GNUPGHOME="${{ steps.gpg.outputs.gnupg-home }}" - export GNUPGHOME - gpg --batch --yes --local-user "${{ steps.gpg.outputs.ephemeral-fingerprint }}" --output test.txt.sig --detach-sign test.txt - gpg --verify test.txt.sig test.txt - - - name: Show trust chain - run: | - GNUPGHOME="${{ steps.gpg.outputs.gnupg-home }}" - export GNUPGHOME - echo "Ephemeral key fingerprint: ${{ steps.gpg.outputs.ephemeral-fingerprint }}" - gpg --list-keys --with-colons - gpg --list-sigs "${{ steps.gpg.outputs.ephemeral-fingerprint }}" - gpg --check-trustdb - - - name: Install fpm and dependencies - run: | - sudo apt-get update -y - sudo apt-get install -y ruby ruby-dev build-essential rpm gnupg - gem install --user-install --no-document fpm - # Ensure Ruby gem bin dir is in PATH for future steps - ruby -e 'print Gem.bindir' >> "$GITHUB_PATH" - - - name: Build dummy RPM - run: | - # Ensure Gem.bindir is in PATH so fpm can be found - gem_bindir=$(ruby -e 'print Gem.bindir') - export PATH="${gem_bindir}:$PATH" - - # Show where fpm is - echo "Gem.bindir is: ${gem_bindir}" - which /root/.local/share/gem/ruby/3.0.0/bin/fpm || { echo "ERROR: fpm not found"; exit 1; } - /root/.local/share/gem/ruby/3.0.0/bin/fpm --version - mkdir -p dist - echo 'dummy' > dist/dummy.txt - /root/.local/share/gem/ruby/3.0.0/bin/fpm -s dir -t rpm -n dummy --rpm-digest sha256 -v 0.1 dist/dummy.txt - - - name: Sign dummy RPM using ephemeral key - id: sign - uses: ./actions/sign-rpm - with: - rpm-path: ./dummy-0.1-1.x86_64.rpm - gpg-fingerprint: ${{ steps.gpg.outputs.ephemeral-fingerprint }} - gnupg-home: ${{ steps.gpg.outputs.gnupg-home }} - - - name: Show verification - run: "echo \"Verification: ${{ steps.sign.outputs.verification }}\"" \ No newline at end of file