Fix: change the GH Action that does the GPG Key import during release

tfzk · Jul 27, 2022 · 175c329 · 175c329
1 parent 5c7e9ad
commit 175c329
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 5 deletions.
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -14,6 +14,8 @@ on:
   push:
     tags:
       - 'v*'
+permissions:
+  contents: write
 jobs:
   goreleaser:
     runs-on: ubuntu-latest
@@ -32,12 +34,11 @@ jobs:
           cache: true
       -
         name: Import GPG key
+        uses: crazy-max/ghaction-import-gpg@v5
         id: import_gpg
-        uses: hashicorp/ghaction-import-gpg@v2.1.0
-        env:
-          # These secrets will need to be configured for the repository:
-          GPG_PRIVATE_KEY: ${{ secrets.GPG_PRIVATE_KEY }}
-          PASSPHRASE: ${{ secrets.PASSPHRASE }}
+        with:
+          gpg_private_key: ${{ secrets.GPG_PRIVATE_KEY }}
+          passphrase: ${{ secrets.PASSPHRASE }}
       -
         name: Run GoReleaser
         uses: goreleaser/goreleaser-action@v3.0.0

diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -3,6 +3,7 @@
 NOTES:
 
 * No new feature: cutting a release because all major dependencies have received an update since release `v1.0.0`.
+* Updated GH Action that imports the GPG key during release: [hashicorp/ghaction-import-gpg](https://github.com/hashicorp/ghaction-import-gpg#warning-this-action-as-been-deprecated) was deprecated.
 
 ## 1.0.0 (July 11, 2022)