feat: pin client GPG trust and publish signed Git/Gist key releases

2026-10-13 07:43:57 +00:00 · 2026-10-13 10:50:56 +08:00
parent 2f2f6db4d6
commit d72aa6eda7
28 changed files with 3187 additions and 427 deletions
@@ -20,12 +20,13 @@ jobs:
      - run: npm ci
      - name: Install shell test interpreters
        run: |
-          if ! command -v busybox >/dev/null || ! command -v shellcheck >/dev/null; then
+          if ! command -v busybox >/dev/null || ! command -v shellcheck >/dev/null || ! command -v gpg >/dev/null; then
            sudo apt-get update
-            sudo apt-get install -y busybox-static shellcheck
+            sudo apt-get install -y busybox-static shellcheck gnupg
          fi
          busybox sh -c 'echo "BusyBox shell ready"'
          shellcheck --version
+          gpg --version
      - name: Run unit, shell, and real-browser tests
        run: npm test
        env: