diff --git a/action.yml b/action.yml index 654a3c1..9934f71 100644 --- a/action.yml +++ b/action.yml @@ -13,14 +13,20 @@ runs: steps: - name: Determine cargo bin directory run: echo "::set-output name=dir::$(dirname $(which cargo))" + shell: bash id: cargo - name: Download ${{inputs.bin || inputs.crate}} run: curl -o ${{steps.cargo.outputs.dir}}/${{inputs.bin || inputs.crate}} https://github.com/dtolnay/install/releases/download/${{inputs.crate}}/${{inputs.bin || inputs.crate}} + shell: bash - name: Download ${{inputs.bin || inputs.crate}}.sig run: curl -o ${{runner.temp}}/${{inputs.bin || inputs.crate}}.sig https://github.com/dtolnay/install/releases/download/${{inputs.crate}}/${{inputs.bin || inputs.crate}}.sig + shell: bash - name: Retrieve public key of signing key run: gpg --output ${{runner.temp}}/signing-key.gpg --dearmor ${{github.action_path}}/signing-key.asc + shell: bash - name: Verify gpg signature run: gpg --no-default-keyring --keyring ${{runner.temp}}/signing-key.gpg --verify ${{runner.temp}}/${{inputs.bin || inputs.crate}}.sig ${{steps.cargo.outputs.dir}}/${{inputs.bin || inputs.crate}} + shell: bash - name: Set executable bit run: chmod +x ${{steps.cargo.outputs.dir}}/${{inputs.bin || inputs.crate}} + shell: bash