Sign releases

Author: KrishnaIyer

.github/workflows/goreleaser.yml

@@ -17,10 +17,16 @@ jobs:
       uses: actions/setup-go@v3
       with:
         go-version: '~1.19'
+    - name: Get the signing key
+      run: |
+        echo -n ${{ secrets.GPG_SIGNING_KEY }} | base64 --decode > /tmp/gpg_signing.key
+        printf '%s' '${{ secrets.GPG_PASSPHRASE }}' >/tmp/gpg_passphrase
+        cat /tmp/gpg_passphrase | gpg --passphrase-fd 0 --no-tty --batch --import /tmp/gpg_signing.key
     - name: Run GoReleaser
       uses: goreleaser/goreleaser-action@v4
       with:
         version: latest
         args: release --rm-dist
       env:
         GITHUB_TOKEN: ${{ secrets.RELEASE_TOKEN }}
+        SIGN_KEY_NAME: ${{ secrets.SIGN_KEY_NAME }}