Skip to content

Support reading GPG key directly from file

Tomasz Maczukin requested to merge support-reading-gpg-key-from-file into master

What does this MR do?

Adds support for configuring GPG Signer directly from key/password files.

Why was this MR needed?

Passing values of GPG key or it's password through environment variables is risky. While GitLab's File variable feature is not the golden solution, it improves the security by making it harder to reveal the key or password by mistake.

This MR will add support for configuring GPG signer from files, which makes it possible to be used natively with File variables.

What's the best way to test this MR?

What are the relevant issue numbers?

Closes #2

Edited by Tomasz Maczukin

Merge request reports