diff --git a/.github/workflows/sign.yml b/.github/workflows/sign.yml index e9a17fc..bbbd7cb 100644 --- a/.github/workflows/sign.yml +++ b/.github/workflows/sign.yml @@ -6,7 +6,6 @@ on: paths: - 'plugins/**/*.js' - 'plugins/**/manifest.json' - - 'security/*.json' workflow_dispatch: jobs: @@ -38,19 +37,10 @@ jobs: - name: Generate store.json run: bash scripts/generate-store.sh > store.json - - name: Sign security files - env: - SIGNING_KEY: ${{ secrets.PLUGIN_SIGNING_KEY }} - run: | - echo "$SIGNING_KEY" > /tmp/private.key - chmod 600 /tmp/private.key - bash scripts/sign-security.sh /tmp/private.key - rm -f /tmp/private.key - - name: Commit changes run: | git config user.name "GitHub Actions" git config user.email "actions@github.com" - git add -A "plugins/**/*.sig" store.json "security/*.json" + git add -A "plugins/**/*.sig" store.json git diff --staged --quiet || git commit -m "chore: update signatures and store" git push diff --git a/scripts/sign-security.sh b/scripts/sign-security.sh deleted file mode 100755 index e30d65b..0000000 --- a/scripts/sign-security.sh +++ /dev/null @@ -1,36 +0,0 @@ -#!/bin/bash -set -e - -KEY_FILE="$1" - -if [ -z "$KEY_FILE" ]; then - echo "Usage: $0 " - exit 1 -fi - -SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)" -REPO_ROOT="$(dirname "$SCRIPT_DIR")" -SIGNTOOL="$REPO_ROOT/signtool" - -# 构建 signtool -if [ ! -f "$SIGNTOOL" ]; then - echo "Building signtool..." - cd "$REPO_ROOT" - go build -o signtool ./tools/signtool -fi - -cd "$REPO_ROOT" - -# 签名撤销列表 -if [ -f "security/revocation.json" ]; then - echo "Signing revocation.json..." - "$SIGNTOOL" sign-json -key "$KEY_FILE" security/revocation.json -fi - -# 签名公钥列表 -if [ -f "security/keys.json" ]; then - echo "Signing keys.json..." - "$SIGNTOOL" sign-json -key "$KEY_FILE" security/keys.json -fi - -echo "Done!" diff --git a/security/keys.json b/security/keys.json deleted file mode 100644 index a6cd9e4..0000000 --- a/security/keys.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "version": 1, - "updated_at": 1735560000, - "keys": [], - "signature": "" -} diff --git a/security/revocation.json b/security/revocation.json deleted file mode 100644 index 48b7425..0000000 --- a/security/revocation.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "version": 1, - "updated_at": 1735560000, - "entries": [], - "signature": "" -}