Minisign Release Signer
Version updated for https://github.com/pattonwebz/minisign-release-signer to version v1.0.0.
- This action is used across all versions by ? repositories.
Action Type
This is a Composite action.
Go to the GitHub Marketplace to find the latest changes.
Action Summary
This GitHub Action automates the signing of release artifacts (like WordPress plugins and themes) with Minisign, a digital signature tool that uses Ed25519 keys. The action creates detached signatures, verifies them against a published public key, and logs each signature in Sigstore Rekor for transparency. It supports multiple files per release and provides replay protection by embedding trusted comments in the signatures. The action is designed to work seamlessly with WordPress workflows but can be used for any distributable artifact.