CI: verify donation addresses are signed

monero-project · Oct 16, 2024 · 47b8429 · 47b8429
1 parent b9e4808
commit 47b8429
Show file tree

Hide file tree

Showing 4 changed files with 29 additions and 8 deletions.
diff --git a/.github/workflows/hashes.yaml b/.github/workflows/hashes.yaml
@@ -5,10 +5,12 @@ on:
     paths:
       - 'downloads/hashes.txt'
       - '_data/downloads.yml'
+      - '_data/contributing.yml'
   pull_request:
     paths:
       - 'downloads/hashes.txt'
       - '_data/downloads.yml'
+      - '_data/contributing.yml'
 jobs:
   validate-hashes:
     name: Validate Hashes
@@ -19,11 +21,14 @@ jobs:
         run: |
           sudo apt-get install -y --no-install-recommends curl gpg jq python3-pip
           sudo pip3 install yq
-      - name: Verify hashes.txt signature
+      - name: Verify hashes.txt + contributing.yml signature
         run: |
           curl -sL https://raw.githubusercontent.com/monero-project/monero/master/utils/gpg_keys/binaryfate.asc |
             gpg --import
           gpg --verify downloads/hashes.txt
+          # signed by myself for testing purposes only
+          curl -sL https://raw.githubusercontent.com/plowsof/pgp/refs/heads/main/plowsofsmol.asc | gpg --import
+          gpg --verify _data/contributing.yml.asc
       - name: Verify filenames
         run: |
           lines="$(grep -v ^# downloads/hashes.txt)"

diff --git a/_data/contributing.yml b/_data/contributing.yml
@@ -0,0 +1,9 @@
+address_xmr: 888tNkZrPN6JsEgekjMnABU4TBzc2Dt29EPAvkRxbANsAnjyPbb3iQ1YBRk1UXcdRsiKc9dhwMVgN5S9cQUiyoogDavup3H
+address_btc: 1KTexdemPdxSBcG55heUuTjDRYqbC5ZL8H
+address_openalias: donate.getmonero.org
+view_address: 44AFFq5kSiGBoZ4NMDwYtN18obc8AemS33DBLWs3H7otXft3XjrpDtQGv7SqSsaBYBb98uNbr2VBBEt7f2wfn3RVGQBEP3A
+view_key: f359631075708155cc3d92a32b75a7d02a5dcf27756707b47a2b31b21c389501
+qr_xmr_filename: /img/donate-monero.png
+qr_xmr_checksum: cf6cb49cf98726a40b860a6bb19df77df724a3e8e1ccb039adf8432de1509911
+qr_btc_filename: /img/donate-bitcoin.png
+qr_btc_checksum: ef2b0e59e401caad2393cb11f50dfc29b364e0af0fd5683012fe0abded608655
diff --git a/_data/contributing.yml.asc b/_data/contributing.yml.asc
@@ -0,0 +1,7 @@
+-----BEGIN PGP SIGNATURE-----
+
+iI0EABMIADUWIQTci88MUIPyAweCgD5OipEtQO0FLAUCZw/JrBcccGxvd3NvZkBw
+cm90b25tYWlsLmNvbQAKCRBOipEtQO0FLDoNAQDjDLzqrdO9SlBZdHrIecU/zuYL
+Fxofun3BBOZN1Q7h1QD/ZHtZjDx+5RPF9ugya3yoUyQsX8kJ/0XT9rZIK0ZVyAw=
+=FIij
+-----END PGP SIGNATURE-----
diff --git a/get-started/contributing/index.md b/get-started/contributing/index.md
@@ -70,25 +70,25 @@ meta_descr: meta_descr.contributing
                         <div class="col-xs-12">
                             <h3>{% t contributing.genfund %}</h3>
                             <p>{% t contributing.genfund_p %}</p>
-                            <p>Monero:<br><code class="donation-field">888tNkZrPN6JsEgekjMnABU4TBzc2Dt29EPAvkRxbANsAnjyPbb3iQ1YBRk1UXcdRsiKc9dhwMVgN5S9cQUiyoogDavup3H</code></p>
+                            <p>Monero:<br><code class="donation-field">{{ site.data.contributing.address_xmr }}</code></p>
                             <details>
                                 <summary>{% t contributing.primary_address %}:</summary>
-                                <code class="donation-field">44AFFq5kSiGBoZ4NMDwYtN18obc8AemS33DBLWs3H7otXft3XjrpDtQGv7SqSsaBYBb98uNbr2VBBEt7f2wfn3RVGQBEP3A</code>
+                                <code class="donation-field">{{ site.data.contributing.view_address }}</code>
                             </details>
                             <details>
                                 <summary>{% t moneropedia.entries.viewkey %}:</summary>
-                                <code class="donation-field">f359631075708155cc3d92a32b75a7d02a5dcf27756707b47a2b31b21c389501</code>
+                                <code class="donation-field">{{ site.data.contributing.view_key }}</code>
                             </details>
-                            <p>Bitcoin:<br><code class="donation-field">1KTexdemPdxSBcG55heUuTjDRYqbC5ZL8H</code></p>
-                            <p>@openalias: <code class="donation-field">donate.getmonero.org</code></p>
+                            <p>Bitcoin:<br><code class="donation-field">{{ site.data.contributing.address_btc }}</code></p>
+                            <p>@openalias: <code class="donation-field">{{ site.data.contributing.address_openalias }}</code></p>
                         </div>
                     </div><br>
                     <div class="row center-xs">
                         <div class="col-lg-6">
-                            <img class="qr" src="/img/donate-monero.png" alt="{% t contributing.altqrmonero %}"/>
+                            <img class="qr" src="{{ site.data.contributing.qr_xmr_filename }}" alt="{% t contributing.altqrmonero %}"/>
                         </div>
                         <div class="col-lg-6">
-                            <img class="qr" src="/img/donate-bitcoin.png" alt="{% t contributing.altqrbitcoin %}"/>
+                            <img class="qr" src="{{ site.data.contributing.qr_btc_filename }}" alt="{% t contributing.altqrbitcoin %}"/>
                         </div>
                     </div>
                     <div class="row start-xs">