Skip to content

Commit

Permalink
chore: bump dctlenv to fetch & verify new driftctl GPG key
Browse files Browse the repository at this point in the history
  • Loading branch information
wbeuil committed Feb 6, 2023
1 parent f8e33f2 commit fa52d30
Showing 1 changed file with 11 additions and 2 deletions.
13 changes: 11 additions & 2 deletions entrypoint.sh
Original file line number Diff line number Diff line change
Expand Up @@ -10,10 +10,19 @@ install_driftctl() {
git clone --depth 1 --branch v0.1.8 https://github.com/wbeuil/dctlenv ~/.dctlenv
export PATH="$HOME/.dctlenv/bin:$PATH"

gpg --keyserver hkps://keys.openpgp.org --recv-keys 0xACC776A79C824EBD
# Since CircleCI breach on 05/01/23, driftctl changed its signing key
# which means the PGP signature will be different for versions below 0.38.1
driftctl_key="65DDA08AA1605FC8211FC928FFB5FCAFD223D274"
if version_le "${version/v/}" "0.38.1"; then
driftctl_key="277666005A7F01D484F6376DACC776A79C824EBD"
fi

gpg --keyserver hkps://keys.openpgp.org --recv-keys $driftctl_key

# Better debug logs
echo "Downloading driftctl:$version"
DCTLENV_CURL=1 dctlenv use $version
DCTLENV_CURL=1 dctlenv install $version
dctlenv use $version
}

parse_inputs() {
Expand Down

0 comments on commit fa52d30

Please sign in to comment.