Embed release public key; rename signing secret to RELEASE_SIGNING_KEY

2026-09-20 22:15:19 +02:00
parent d1e01f9b78
commit 08d02d8fa8
4 changed files with 11 additions and 8 deletions
@@ -117,7 +117,7 @@ version. Disable with `AUTO_UPDATE=false`. Releases are signed by CI with
 OpenSSL; the matching public key lives in `internal/update/pubkey.go`
 (one-time setup: `openssl genpkey -algorithm ed25519 -out private.pem`,
 `openssl pkey -in private.pem -pubout -out public.pem`; private key goes
-to the `SIGNING_KEY` repo secret, public key is committed).
+to the `RELEASE_SIGNING_KEY` repo secret, public key is committed).

 ### Docker