From e35e74de707ccc556e3735a5d9e4b04e3e5800eb Mon Sep 17 00:00:00 2001
From: Hung-I Wang <whygowe+for-git@gmail.com>
Date: Sat, 13 Mar 2021 12:31:34 +0800
Subject: [PATCH] Sign plugin in release

---
 .github/workflows/publish.yml | 10 ++++++++--
 1 file changed, 8 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 33be871..3e1d660 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -7,8 +7,9 @@ on:
       - 'v*' # Push events to matching v*, i.e. v1.0, v20.15.10
 
 jobs:
-  build:
+  release:
     name: Release
+    environment: grafana_sign_environment
     runs-on: ubuntu-latest
     steps:
     - name: Checkout code
@@ -27,12 +28,17 @@ jobs:
     - name: Init
       run:
         yarn install
-    - name: Test & lint
+    - name: Test & Lint
       run:
         yarn ci
     - name: Build
       run:
         yarn build
+    - name: Sign Dist
+      env: # Or as an environment variable
+        GRAFANA_API_KEY: ${{ secrets.GRAFANA_API_KEY }}
+      run:
+        npx @grafana/toolkit plugin:sign
     - name: Create tarball
       run: 
         tar czf /tmp/dist.tar.gz --transform s/^dist/traceroute-map-panel/ dist/