npm2deb icon indicating copy to clipboard operation
npm2deb copied to clipboard

[feature] auto setup pgpsigurlmangle

Open kapouer opened this issue 9 years ago • 3 comments

It might be possible to automatically add

pgpsigurlmangle=s/archive\/(\d\S+)\.tar\.gz/releases\/download\/$1\/$1\.tar\.gz\.asc/

to debian/watch, when the file actually exists.

kapouer avatar Nov 15 '16 21:11 kapouer

And, of course, put the trusted key into debian/upstream/signing-key.asc. See https://wiki.debian.org/debian/watch for more info.

kapouer avatar Nov 15 '16 21:11 kapouer

Hey i spoke too fast, github doesn't export the signature of a tag (yet ?) as a simple http url.

kapouer avatar Nov 15 '16 22:11 kapouer

it works with option: pgpsigurlmangle=s/archive/(v?\d\S+).tar.gz/releases/download/$1/$1.tar.gz.asc/

but you must upload asc signature manually to the related github release.

rhash avatar Sep 13 '17 08:09 rhash