From 75000f3b35807f32b282a6d2c2f8d7a562f139f3 Mon Sep 17 00:00:00 2001 From: Nick Schonning Date: Fri, 14 Aug 2026 00:02:46 -0400 Subject: [PATCH] chore: pull Releaser keys from keyring instead of README --- .github/workflows/node-keys.yml | 1 + update-keys.sh | 6 +++++- 2 files changed, 6 insertions(+), 1 deletion(-) diff --git a/.github/workflows/node-keys.yml b/.github/workflows/node-keys.yml index dd9dd84a82..6072808154 100644 --- a/.github/workflows/node-keys.yml +++ b/.github/workflows/node-keys.yml @@ -4,6 +4,7 @@ on: pull_request: paths: - keys/node.keys + - update-keys.sh - .github/workflows/node-keys.yml permissions: diff --git a/update-keys.sh b/update-keys.sh index b6fec15418..53497ee94e 100755 --- a/update-keys.sh +++ b/update-keys.sh @@ -1,3 +1,7 @@ #!/bin/sh -ex -curl -fsSLo- --compressed https://github.com/nodejs/node/raw/main/README.md | awk '/--recv-keys.*#/{ gsub(/^.*--recv-keys\s+/,"");gsub(/\s+#.*$/,""); print }' > keys/node.keys +curl -fsSLO --compressed "https://github.com/nodejs/release-keys/raw/refs/heads/main/gpg-only-active-keys/pubring.kbx" + +gpg --no-default-keyring --keyring "./pubring.kbx" --keyid-format long --with-colons --fingerprint | awk -F: '/^pub:.*/ { getline; print $10}' > keys/node.keys + +rm pubring.kbx