feat: use hpesign to sign the release

.github/workflows/release.yaml

@@ -25,17 +25,10 @@ jobs:
         with:
           go-version-file: 'go.mod'
           cache: true
-      - name: Import GPG key
-        uses: crazy-max/[email protected]
-        id: import_gpg
-        with:
-          gpg_private_key: ${{ secrets.GPG_PRIVATE_KEY }}
-          passphrase: ${{ secrets.PASSPHRASE }}
       - name: Run GoReleaser
         uses: goreleaser/[email protected]
         with:
           args: release --clean
         env:
           # GitHub sets the GITHUB_TOKEN secret automatically.
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          GPG_FINGERPRINT: ${{ steps.import_gpg.outputs.fingerprint }}

.goreleaser.yml

@@ -41,16 +41,9 @@ checksum:
   algorithm: sha256
 signs:
   - artifacts: checksum
+    cmd: just
     args:
-      # if you are using this in a GitHub action or some other automated pipeline, you
-      # need to pass the batch flag to indicate its not interactive.
-      - "--batch"
-      - "--local-user"
-      - "{{ .Env.GPG_FINGERPRINT }}" # set this environment variable for your signing key
-      - "--output"
-      - "${signature}"
-      - "--detach-sign"
-      - "${artifact}"
+      - "sign"
 release:
   extra_files:
     - glob: 'terraform-registry-manifest.json'

Justfile

@@ -32,6 +32,13 @@ setup-dev:
   curl -sSfL https://raw.githubusercontent.com/golangci/golangci-lint/master/install.sh | sh -s -- -b $(go env GOPATH)/bin v1.60.1
   go install github.com/segmentio/golines@latest
 
+build-local:
+  go install github.com/goreleaser/goreleaser/v2@latest
+  goreleaser release --clean --skip=publish,validate
+
+sign:
+  signhpe --in dist/$(ls dist | grep SHA256SUMS) --keyring --project "HPE Aruba Networking UXI Terraform Provider" --out ./dist
+
 test-client +ARGS='':
   cd {{ CONFIG_API_CLIENT_DIR }} && go test -v ./... -race -covermode=atomic -coverprofile=.coverage {{ ARGS }}