Jakub Domeracki dc0919da33 feat: sign coder binaries with the release key using GPG (#18774) ...

### Description
This PR introduces GPG signing for all Coder *slim-binaries*.
Detached signatures will allow users to verify the integrity and
authenticity of the binaries they download.

### Changes
  * `scripts/sign_with_gpg.sh`: New script to sign a given binary
     using GPG. It imports the release key, signs the binary, and
     verifies the signature.
   * `scripts/build_go.sh`: Updated to call `sign_with_gpg.sh` when the
     `CODER_SIGN_GPG` environment variable is set to 1.
   * `.github/workflows/release.yaml`: The` CODER_SIGN_GPG` environment
     variable is now set to 1 during the release build, enabling GPG
     signing for all release binaries.
   * `.github/workflows/ci.yaml`: The `CODER_SIGN_GPG` environment
     variable is now set to 1 during the CI build, enabling GPG
     signing for all CI binaries.
* `Makefile`: Detached signatures are moved to the `/site/out/bin/
`directory

2025-07-09 11:53:27 +02:00

..

apidocgen

chore: force babel dependency to 7.26.10 (#17193)

2025-04-01 22:05:23 -04:00

apitypings

chore: remove unnecessary redeclarations in for loops (#18440)

2025-06-20 13:16:55 -06:00

auditdocgen

chore: adopt markdownlint and markdown-table-formatter for *.md (#15831)

2025-01-03 13:12:59 +00:00

audittypegen

…

clidocgen

chore: update golang to 1.24.1 (#17035)

2025-03-26 01:56:39 -05:00

dbgen

chore: remove dbmem (#18803)

2025-07-09 09:46:31 +02:00

echoserver

chore: update golang to 1.24.1 (#17035)

2025-03-26 01:56:39 -05:00

embedded-pg

ci: cache embedded postgres downloaded binaries (#18477)

2025-06-25 12:00:20 +01:00

examplegen

chore: use tabs for prettier and biome (#14283)

2024-08-15 14:53:53 -06:00

gensite

…

ironbank

…

linux-pkg

chore: update docs links (#14221)

2024-08-17 11:51:13 +00:00

metricsdocgen

docs: restructure docs (#14421)

2024-10-05 10:52:04 -05:00

migrate-ci

…

migrate-test

fix: correct spurious edits made during the lint fixing slog (#17113)

2025-03-27 01:13:21 -05:00

oauth2

feat: implement RFC 6750 Bearer token authentication (#18644)

2025-07-02 19:14:54 +02:00

rbac-authz

chore: improve rbac and add benchmark tooling (#18584)

2025-06-27 12:05:34 +01:00

release

feat: sign coder binaries with the release key using GPG (#18774)

2025-07-09 11:53:27 +02:00

releasemigrations

chore: remove unnecessary redeclarations in for loops (#18440)

2025-06-20 13:16:55 -06:00

testidp

chore: update golang to 1.24.1 (#17035)

2025-03-26 01:56:39 -05:00

typegen

chore: remove unnecessary redeclarations in for loops (#18440)

2025-06-20 13:16:55 -06:00

win-installer

…

archive.sh

…

build_docker_multiarch.sh

…

build_docker.sh

feat: add SBOM generation and attestation to GitHub workflow (#17277)

2025-04-07 17:54:05 +02:00

build_go.sh

feat: sign coder binaries with the release key using GPG (#18774)

2025-07-09 11:53:27 +02:00

build_windows_installer.sh

chore: sign the windows installer (#14353)

2024-08-19 20:33:37 -04:00

check_codersdk_imports.sh

chore: add lint for codersdk dependencies (#14638)

2024-09-12 15:34:03 +10:00

check_enterprise_imports.sh

…

check_go_versions.sh

ci: check go versions are consistent (#17149)

2025-04-01 09:03:54 +01:00

check_site_icons.sh

fix: return error if agent init script fails to download valid binary (#13280)

2024-05-30 13:33:00 +02:00

check_unstaged.sh

fix(scripts/check_unstaged.sh): add argument separator in git diff command (#17122)

2025-03-27 08:57:12 +00:00

coder-dev.sh

fix(scripts/coder-dev.sh): silence output if stdout is not a TTY (#16131)

2025-01-14 14:34:23 +00:00

deploy-pr.sh

chore(scripts): auto authenticate gh CLI in scripts on dogfood (#13107)

2024-04-30 19:36:12 +03:00

dev-oidc.sh

feat(cli/server.go): allow the use of public OIDC clients (#16489)

2025-02-07 14:06:38 +01:00

develop.sh

chore: ensure coder is logged before querying orgs (#15618)

2024-11-21 16:04:21 +01:00

Dockerfile

…

Dockerfile.base

chore: update Terraform to 1.12.2 (#18407)

2025-06-18 01:47:38 +10:00

helm.sh

…

image_tag.sh

…

lib.sh

fix(scripts): allow docs_update_experiments.sh to be run on macOS (#14658)

2024-09-12 21:28:07 +00:00

list_dependencies.sh

chore: add lint for codersdk dependencies (#14638)

2024-09-12 15:34:03 +10:00

normalize_path.sh

chore: run test-go-pg on macOS and Windows in regular CI (#17853)

2025-05-22 15:53:37 +02:00

notarize_darwin.sh

…

package.sh

Revert "chore: fix build ci (#13164)" (#13180)

2024-05-06 13:13:24 +00:00

pnpm_install.sh

chore: only run pnpm when node_modules are out of date in Makefile (#16017)

2025-01-03 18:37:25 +05:00

release_promote_stable.sh

chore(scripts): fix stable release promote script (#13204)

2024-05-17 08:25:10 +00:00

release.sh

fix: add manual confirmation for release calendar update (#18748)

2025-07-03 19:45:12 +00:00

remote_playwright.sh

chore(site): update @playwright/test to version 1.47.2 (#14912)

2024-10-01 13:59:49 +00:00

rules.go

feat: fail CI when pubsub.Publish calls are found in db transactions (#17903)

2025-05-19 14:52:51 +00:00

sign_darwin.sh

chore: embed Info.plist in dylib (#15907)

2024-12-18 11:08:33 +00:00

sign_windows.sh

feat: sign windows binaries (#13086)

2024-04-29 10:43:27 -05:00

sign_with_gpg.sh

feat: sign coder binaries with the release key using GPG (#18774)

2025-07-09 11:53:27 +02:00

update-flake.sh

chore(dogfood): include multiple templates under dogfood/ (#16846)

2025-03-11 13:17:40 +00:00

update-release-calendar.sh

chore: fix release calendar and script (#17745)

2025-05-14 00:04:37 +05:00

version.sh

fix: fix shallow clones not retrieving a valid semver (#13609)

2024-06-22 00:02:12 +10:00

which-release.sh

chore: add which-release script (#18657)

2025-07-01 08:05:44 +00:00