actionhippie/actionhippie-gpgsign
Sign artifacts or any file with GnuPG
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Activelast commit Jul 14, 2026
- License
- Apache 2.0
Pinned Snippet
uses: actionhippie/gpgsign@3dd7077a5b772de330fa7307ce06c8132c71b954 # v1.8.1tags can be moved; commit SHAs can't. why a SHA?
Inputs
| name | description | required | default |
|---|---|---|---|
| private_key | Private GPG key used for signing | yes | — |
| passphrase | Passphrase for the GPG key | no | — |
| armor | Create ASCII armored output, defaults to `true` | no | true |
| detach_sign | Make a detached signature | no | — |
| clear_sign | Make a clear text signature | no | — |
| files | List of files to create a signature | yes | — |
| excludes | List of files to exclude from signing | no | — |
Outputs
no outputs