summaryrefslogtreecommitdiffstats
path: root/.buildkite/publish-artifacts.sh
blob: 8e39cad02c01bc805708ed6f9647e684df8353f5 (plain) (blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
#!/bin/bash

set -euo pipefail

if [[ $BUILDKITE != true ]]; then
    echo "Skipping artifact publishing when not executed by Buildkite."
    exit 0
fi

cd "$WORKDIR/artifacts/$ARCH"

tar -cf rpm-repo.tar rpms &
tar -cf maven-repo.tar maven-repo
wait

for FILE in *.tar; do
    cosign sign-blob -y --oidc-provider=buildkite-agent --output-signature "$FILE.sig" --output-certificate "$FILE.pem" "$FILE"
done

buildkite-agent artifact upload "*.tar;*.tar.sig;*.tar.pem" "$BUILDKITE_ARTIFACT_DESTINATION/$VESPA_VERSION"