Skip to content

ci(release): sign with the rotated wallet publisher key - #48

Merged
TeoSlayer merged 1 commit into
mainfrom
ci/rotate-publisher-key
Oct 8, 2026
Merged

TeoSlayer merged 1 commit into
mainfrom
ci/rotate-publisher-key

Conversation

@TeoSlayer

Copy link
Copy Markdown
Contributor

The key the catalogue pins for the wallet (ed25519:VF8fdEP…) is not available to any workflow: PILOT_APP_PUBLISHER_KEY was never set for this repo, and the v0.4.0 release stopped at signing.

  • The wallet's publisher is rotated to ed25519:xAD0ai5GYWo8v0cmdhytZYRjSbi2edgEthWkBnO+1ik=.
  • Its private key is this repo's PILOT_APP_PUBLISHER_KEY (set), with an offline copy kept by the maintainer.
  • The catalogue pin is re-pointed through app-template's admin-gated rotation, signed with the catalogue key.

🤖 Generated with Claude Code

The key the catalogue pinned for the wallet (VF8fdEP…) is not available
to any workflow: PILOT_APP_PUBLISHER_KEY was never set for this repo,
and the v0.4.0 release stopped at signing. The wallet's publisher is
rotated to a new key, held as this repo's PILOT_APP_PUBLISHER_KEY; the
catalogue pin is re-pointed to it by an admin-gated rotation signed with
the catalogue key.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@codecov

codecov Bot commented Oct 8, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

@TeoSlayer
TeoSlayer merged commit 4725d85 into main Oct 8, 2026
3 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant