From 8cc7ca6615c11d984a37961fdbe76406ff2538c9 Mon Sep 17 00:00:00 2001 From: Teo Calin Date: Thu, 8 Oct 2026 16:27:02 +0300 Subject: [PATCH] ci(release): sign with the rotated wallet publisher key MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit The key the catalogue pinned for the wallet (VF8fdEP…) is not available to any workflow: PILOT_APP_PUBLISHER_KEY was never set for this repo, and the v0.4.0 release stopped at signing. The wallet's publisher is rotated to a new key, held as this repo's PILOT_APP_PUBLISHER_KEY; the catalogue pin is re-pointed to it by an admin-gated rotation signed with the catalogue key. Co-Authored-By: Claude Opus 5.5 --- .github/workflows/release.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index fe27f0d..1bb3a65 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -14,7 +14,7 @@ permissions: contents: read env: - EXPECTED_PUBLISHER: ed25519:VF8fdEP/Oe2aWN3ozQ7Ar22137tHb7dkSw0hlzlk/os= + EXPECTED_PUBLISHER: ed25519:xAD0ai5GYWo8v0cmdhytZYRjSbi2edgEthWkBnO+1ik= # pilotctl that signs the manifests. Pinned to a release tag: this step # handles the publisher private key, so it must not build whatever is on # pilotprotocol's main branch at release time.