Verify file signature with PGP

Description

The Verify file signature with PGP action can be used to verify a file signature to ensure its authenticity.

GnuPG package must be installed in the runtime environment and encryption keys added to the runtime user keystore for this to function.

Options

Option Description

Option	Description
Action name	The name of the workflow action.
GPG location	The file path of the GnuPG executable (e.g. `/usr/bin/gpg`).
Filename	The signed file path.
Use detached signature	Whether or not to use a detached signature.
Detached signature	Path to the detached signature file (only available when the `Use detached signature` above is checked)

Action name

The name of the workflow action.

GPG location

The file path of the GnuPG executable (e.g. /usr/bin/gpg).

Filename

The signed file path.

Use detached signature

Whether or not to use a detached signature.

Detached signature

Path to the detached signature file (only available when the Use detached signature above is checked)

Result

What this action passes on to the next action. See Action results for how results travel through a workflow.

Result	Value
True	GnuPG verified the signature, with 0 errors: a signed or clear-signed Filename, or with Use detached signature the Detached signature of Filename.
False	The number of errors is 1. Filename is empty or doesn’t exist, the file is not signed, the signature doesn’t match the file (for example a file changed after it was signed), the signing key is not in the keyring, Use detached signature is checked while Detached signature is empty, or GPG location is empty or not found.
Result files	Passed on unchanged.
Result rows	Passed on unchanged.

Result

Value

True

GnuPG verified the signature, with 0 errors: a signed or clear-signed Filename, or with Use detached signature the Detached signature of Filename.

False

The number of errors is 1. Filename is empty or doesn’t exist, the file is not signed, the signature doesn’t match the file (for example a file changed after it was signed), the signing key is not in the keyring, Use detached signature is checked while Detached signature is empty, or GPG location is empty or not found.

Result files

Passed on unchanged.

Result rows

Passed on unchanged.