Use template in sign.args

Co-authored-by: CrazyMax <crazy-max@users.noreply.github.com>

.github/workflows/ci.yaml

@@ -72,6 +72,7 @@ jobs:
           go-version: 1.14
       -
         name: Import GPG key
+        id: import_gpg
         uses: crazy-max/ghaction-import-gpg@v1
         env:
           GPG_PRIVATE_KEY: ${{ secrets.GPG_PRIVATE_KEY_TEST }}
@@ -82,9 +83,13 @@ jobs:
         with:
           version: latest
           args: -f .goreleaser-signing.yml check --debug
+        env:
+          GPG_FINGERPRINT: ${{ steps.import_gpg.outputs.fingerprint }}
       -
         name: GoReleaser
         uses: ./
         with:
           version: latest
           args: -f .goreleaser-signing.yml release --skip-publish --rm-dist
+        env:
+          GPG_FINGERPRINT: ${{ steps.import_gpg.outputs.fingerprint }}

.goreleaser-signing.yml

@@ -37,4 +37,4 @@ checksum:
 signs:
   -
     artifacts: checksum
-    args: ["--batch", "-u", "27571A53B86AF0C799B38BA77D851EB72D73BDA0", "--output", "${signature}", "--detach-sign", "${artifact}"]
+    args: ["--batch", "-u", "{{ .Env.GPG_FINGERPRINT }}", "--output", "${signature}", "--detach-sign", "${artifact}"]

CHANGELOG.md

@@ -1,5 +1,13 @@
 # Changelog
 
+## 2.0.2 (2020/05/10)
+
+* Use template in `sign.args`
+
+## 2.0.1 (2020/05/10)
+
+* Dummy release to mark v2 as latest on the marketplace
+
 ## 2.0.0 (2020/05/10)
 
 * Remove `key` input and use [Import GPG](https://github.com/crazy-max/ghaction-import-gpg) GitHub Action instead.
@@ -7,6 +15,10 @@
 * Go 1.14
 * Update deps
 
+## 1.5.1 (2020/05/10)
+
+* Mark `key` input as deprecated
+
 ## 1.5.0 (2020/05/07)
 
 * Use native GitHub Action tools to download assets and use GitHub API

README.md

@@ -97,6 +97,7 @@ If [signing is enabled](https://goreleaser.com/customization/#Signing) in your G
 ```yaml
       -
         name: Import GPG key
+        id: import_gpg
         uses: crazy-max/ghaction-import-gpg@v1
         env:
           GPG_PRIVATE_KEY: ${{ secrets.GPG_PRIVATE_KEY }}
@@ -109,14 +110,15 @@ If [signing is enabled](https://goreleaser.com/customization/#Signing) in your G
           args: release --rm-dist
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GPG_FINGERPRINT: ${{ steps.import_gpg.outputs.fingerprint }}
 ```
 
-And reference the userID in your signing configuration:
+And reference the fingerprint in your signing configuration using the `GPG_FINGERPRINT` environment variable:
 
 ```yaml
 signs:
   - artifacts: checksum
-    args: ["--batch", "-u", "<key id, fingerprint, email, ...>", "--output", "${signature}", "--detach-sign", "${artifact}"]
+    args: ["--batch", "-u", "{{ .Env.GPG_FINGERPRINT }}", "--output", "${signature}", "--detach-sign", "${artifact}"]
 ```
 
 ## Customizing