Restore sign_rpms script, it's used in sign_stage_rpms #429
Conversation
This partially reverts "drop signing scripts that were used with koji" Fixes: 39674f4
![github-advanced-security[bot]](https://avatars.githubusercontent.com/in/57789?s=60&v=4){kind=small}
|
|
||
| SIGN_FLAGS=(--define "_gpg_sign_cmd_extra_args --pinentry-mode loopback --passphrase-file ${gpg_pass}" --define "_gpg_path $KEYDIR" --define="_gpg_name $SIGNER") | ||
|
|
||
| rpmdev-vercmp $(rpm --query --queryformat='%{EVR}' rpm) 4.16.0 || RESULT=$? |
Check warning
Code scanning / shellcheck
Quote this to prevent word splitting. Warning
| fi | ||
|
|
||
| if [[ -n $1 ]] ; then | ||
| echo "$@" | xargs $XARGS_JOBS rpmsign --addsign "${SIGN_FLAGS[@]}" |
Check notice
Code scanning / shellcheck
Double quote to prevent globbing and word splitting. Note
| if [[ -n $1 ]] ; then | ||
| echo "$@" | xargs $XARGS_JOBS rpmsign --addsign "${SIGN_FLAGS[@]}" | ||
| else | ||
| find "$RPMDIR" -name '*.rpm' | xargs $XARGS_JOBS rpmsign --addsign "${SIGN_FLAGS[@]}" |
Check warning
Code scanning / shellcheck
Use -print0/-0 or -exec + to allow for non-alphanumeric filenames. Warning
| if [[ -n $1 ]] ; then | ||
| echo "$@" | xargs $XARGS_JOBS rpmsign --addsign "${SIGN_FLAGS[@]}" | ||
| else | ||
| find "$RPMDIR" -name '*.rpm' | xargs $XARGS_JOBS rpmsign --addsign "${SIGN_FLAGS[@]}" |
Check notice
Code scanning / shellcheck
Double quote to prevent globbing and word splitting. Note
This partially reverts "drop signing scripts that were used with koji"
Fixes: 39674f4