doc: release: add a step to verify that the tag is signed

Add an extra "git show" step to the release process to verify that the
key has been indeed signed.

Signed-off-by: Fabio Baltieri <fabiobaltieri@google.com>
This commit is contained in:
Fabio Baltieri 2024-11-06 01:35:25 +00:00 committed by Dan Kalowsky
commit 5155c0e820

View file

@ -453,10 +453,20 @@ steps:
#. Post a PR with the updated :zephyr_file:`VERSION` file using #. Post a PR with the updated :zephyr_file:`VERSION` file using
``release: Zephyr 1.11.0-rc1`` as the commit subject. Merge ``release: Zephyr 1.11.0-rc1`` as the commit subject. Merge
the PR after successful CI. the PR after successful CI.
#. Tag and push the version, using an annotated tag:: #. Tag and push the version, using an annotated tag::
$ git pull $ git pull
$ git tag -s -m "Zephyr 1.11.0-rc1" v1.11.0-rc1 $ git tag -s -m "Zephyr 1.11.0-rc1" v1.11.0-rc1
#. Verify that the tag has been signed correctly, ``git show`` for the
tag must contain a signature (look for the ``BEGIN PGP SIGNATURE``
or ``BEGIN SSH SIGNATURE`` marker in the output)::
$ git show v1.11.0-rc1
#. Push the tag::
$ git push git@github.com:zephyrproject-rtos/zephyr.git v1.11.0-rc1 $ git push git@github.com:zephyrproject-rtos/zephyr.git v1.11.0-rc1
#. Send an email to the mailing lists (``announce`` and ``devel``) #. Send an email to the mailing lists (``announce`` and ``devel``)
@ -486,6 +496,15 @@ steps:
$ git pull $ git pull
$ git tag -s -m "Zephyr 1.11.0" v1.11.0 $ git tag -s -m "Zephyr 1.11.0" v1.11.0
#. Verify that the tag has been signed correctly, ``git show`` for the
tag must contain a signature (look for the ``BEGIN PGP SIGNATURE``
or ``BEGIN SSH SIGNATURE`` marker in the output)::
$ git show v1.11.0
#. Push the tag::
$ git push git@github.com:zephyrproject-rtos/zephyr.git v1.11.0 $ git push git@github.com:zephyrproject-rtos/zephyr.git v1.11.0
#. Find the new ``v1.11.0`` tag at the top of the releases page and #. Find the new ``v1.11.0`` tag at the top of the releases page and