diff --git a/.github/workflows/node-keys.yml b/.github/workflows/node-keys.yml index dd9dd84a8..607280815 100644 --- a/.github/workflows/node-keys.yml +++ b/.github/workflows/node-keys.yml @@ -4,6 +4,7 @@ on: pull_request: paths: - keys/node.keys + - update-keys.sh - .github/workflows/node-keys.yml permissions: diff --git a/update-keys.sh b/update-keys.sh index b6fec1541..53497ee94 100755 --- a/update-keys.sh +++ b/update-keys.sh @@ -1,3 +1,7 @@ #!/bin/sh -ex -curl -fsSLo- --compressed https://github.com/nodejs/node/raw/main/README.md | awk '/--recv-keys.*#/{ gsub(/^.*--recv-keys\s+/,"");gsub(/\s+#.*$/,""); print }' > keys/node.keys +curl -fsSLO --compressed "https://github.com/nodejs/release-keys/raw/refs/heads/main/gpg-only-active-keys/pubring.kbx" + +gpg --no-default-keyring --keyring "./pubring.kbx" --keyid-format long --with-colons --fingerprint | awk -F: '/^pub:.*/ { getline; print $10}' > keys/node.keys + +rm pubring.kbx