Skip to content

Propagate release GPG key lookup failures #31306

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
gztong666 wants to merge 3 commits into from
Closed

Propagate release GPG key lookup failures #31306

Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
1849b53
Propagate release GPG key lookup failures
gztong666 Sep 24, 2026
3d938f9
Resolve release GPG key lazily
gztong666 Oct 7, 2026
24bedd2
Merge bazelbuild/bazel master into fix/release-gpg-key-lookup
gztong666 Oct 15, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
7 changes: 5 additions & 2 deletions scripts/ci/build.sh
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -64,8 +64,6 @@ fi
# exit 1
# fi

export APT_GPG_KEY_ID=$(gcloud secrets versions access latest --secret="release-key-gpg-id" --project="bazel-public")

# Generate a string from a template and a list of substitutions.
# The first parameter is the template name and each subsequent parameter
# is taken as a couple: first is the string the substitute and the second
Expand Down Expand Up @@ -296,6 +294,11 @@ function release_to_gcs() {
}

function ensure_gpg_secret_key_imported() {
if [[ -z "${APT_GPG_KEY_ID:-}" ]]; then
APT_GPG_KEY_ID="$(gcloud secrets versions access latest --secret="release-key-gpg-id" --project="bazel-public")"
export APT_GPG_KEY_ID
fi

if ! gpg --list-secret-keys | grep "${APT_GPG_KEY_ID}" > /dev/null; then
keyfile=$(mktemp --tmpdir)
chmod 0600 "${keyfile}"
Expand Down
Loading