krz/keycask

Password manager: Swift core library, CLI for macOS/Linux/Windows, iOS/macOS app. cli password-manager swift

Commit 4f5e4ba710

4f5e4ba710f30a87cbaa359c45e87c847f208c33

parent: a7777ef2ad

Verified · cmc ci/build: failure ci/test: failure

cmc <hello@cleberg.net> · 2026-09-17 15:47 UTC 

CI: fetch signing keys to a file and extract the toolchain atomically

Layout: unified · split

.gitbay/ci.yml +20 −12
@@ -12,12 +12,16 @@ jobs:
12 SWIFT="$HOME/swift-6.4.0-RELEASE-debian13" 12 SWIFT="$HOME/swift-6.4.0-RELEASE-debian13"
13 if [ ! -x "$SWIFT/usr/bin/swift" ]; then 13 if [ ! -x "$SWIFT/usr/bin/swift" ]; then
14 base="https://download.swift.org/swift-6.4.0-release/debian13/swift-6.4.0-RELEASE/swift-6.4.0-RELEASE-debian13.tar.gz" 14 base="https://download.swift.org/swift-6.4.0-release/debian13/swift-6.4.0-RELEASE/swift-6.4.0-RELEASE-debian13.tar.gz"
15 curl -fsSL "$base" -o /tmp/swift.tar.gz "$base.sig" -o /tmp/swift.tar.gz.sig 15 work="$(mktemp -d)"
16 export GNUPGHOME="$(mktemp -d)" 16 curl -fsSL "$base" -o "$work/swift.tar.gz" "$base.sig" -o "$work/swift.tar.gz.sig"
17 curl -fsSL https://swift.org/keys/all-keys.asc | gpg --batch --quiet --import 17 curl -fsSL https://www.swift.org/keys/all-keys.asc -o "$work/keys.asc"
18 gpg --batch --verify /tmp/swift.tar.gz.sig /tmp/swift.tar.gz 18 ls -l "$work"
19 tar -xzf /tmp/swift.tar.gz -C "$HOME" 19 export GNUPGHOME="$work/gnupg"; mkdir -m 700 "$GNUPGHOME"
20 rm -rf /tmp/swift.tar.gz /tmp/swift.tar.gz.sig "$GNUPGHOME" 20 gpg --batch --quiet --import "$work/keys.asc"
21 gpg --batch --verify "$work/swift.tar.gz.sig" "$work/swift.tar.gz"
22 tar -xzf "$work/swift.tar.gz" -C "$work"
23 mv "$work/swift-6.4.0-RELEASE-debian13" "$SWIFT" || true
24 rm -rf "$work"
21 fi 25 fi
22 export PATH="$SWIFT/usr/bin:$PATH" 26 export PATH="$SWIFT/usr/bin:$PATH"
23 swift --version 27 swift --version
@@ -33,12 +37,16 @@ jobs:
33 SWIFT="$HOME/swift-6.4.0-RELEASE-debian13" 37 SWIFT="$HOME/swift-6.4.0-RELEASE-debian13"
34 if [ ! -x "$SWIFT/usr/bin/swift" ]; then 38 if [ ! -x "$SWIFT/usr/bin/swift" ]; then
35 base="https://download.swift.org/swift-6.4.0-release/debian13/swift-6.4.0-RELEASE/swift-6.4.0-RELEASE-debian13.tar.gz" 39 base="https://download.swift.org/swift-6.4.0-release/debian13/swift-6.4.0-RELEASE/swift-6.4.0-RELEASE-debian13.tar.gz"
36 curl -fsSL "$base" -o /tmp/swift.tar.gz "$base.sig" -o /tmp/swift.tar.gz.sig 40 work="$(mktemp -d)"
37 export GNUPGHOME="$(mktemp -d)" 41 curl -fsSL "$base" -o "$work/swift.tar.gz" "$base.sig" -o "$work/swift.tar.gz.sig"
38 curl -fsSL https://swift.org/keys/all-keys.asc | gpg --batch --quiet --import 42 curl -fsSL https://www.swift.org/keys/all-keys.asc -o "$work/keys.asc"
39 gpg --batch --verify /tmp/swift.tar.gz.sig /tmp/swift.tar.gz 43 ls -l "$work"
40 tar -xzf /tmp/swift.tar.gz -C "$HOME" 44 export GNUPGHOME="$work/gnupg"; mkdir -m 700 "$GNUPGHOME"
41 rm -rf /tmp/swift.tar.gz /tmp/swift.tar.gz.sig "$GNUPGHOME" 45 gpg --batch --quiet --import "$work/keys.asc"
46 gpg --batch --verify "$work/swift.tar.gz.sig" "$work/swift.tar.gz"
47 tar -xzf "$work/swift.tar.gz" -C "$work"
48 mv "$work/swift-6.4.0-RELEASE-debian13" "$SWIFT" || true
49 rm -rf "$work"
42 fi 50 fi
43 export PATH="$SWIFT/usr/bin:$PATH" 51 export PATH="$SWIFT/usr/bin:$PATH"
44 swift test 52 swift test