blob: 8e39cad02c01bc805708ed6f9647e684df8353f5 (
plain) (
blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
|
#!/bin/bash
set -euo pipefail
if [[ $BUILDKITE != true ]]; then
echo "Skipping artifact publishing when not executed by Buildkite."
exit 0
fi
cd "$WORKDIR/artifacts/$ARCH"
tar -cf rpm-repo.tar rpms &
tar -cf maven-repo.tar maven-repo
wait
for FILE in *.tar; do
cosign sign-blob -y --oidc-provider=buildkite-agent --output-signature "$FILE.sig" --output-certificate "$FILE.pem" "$FILE"
done
buildkite-agent artifact upload "*.tar;*.tar.sig;*.tar.pem" "$BUILDKITE_ARTIFACT_DESTINATION/$VESPA_VERSION"
|