feat: set verbosity flag and supply release GPG key passphrase

.github/workflows/linux.yml

@@ -130,6 +130,7 @@ jobs:
         env:
           DUMBSERVE_USERNAME: ${{ secrets.DUMBSERVE_USERNAME }}
           DUMBSERVE_PASSWORD: ${{ secrets.DUMBSERVE_PASSWORD }}
+          GPG_PASSWORD: ${{ secrets.GPG_PASSWORD }}
 
       - name: generate documentation
         if: matrix.version == 'stable' && (github.repository == 'realaravinth/dumbserve')

scripts/publish.sh

@@ -76,9 +76,14 @@ sign() {
 	echo "[*] Signing dist tarball checksum"
 	pushd $TMP_DIR
 	export GPG_TTY=$(tty)
-	find $(pwd)
-	find $TMP_DIR
-	gpg --local-user $KEY --output $TARBALL.asc --sign --detach --armor $TARBALL
+	gpg --verbose \
+		--pinentry-mode loopback \
+		--batch --yes \
+		--passphrase $GPG_PASSWORD \
+		--local-user $KEY \
+		--output $TARBALL.asc \
+		--sign --detach \
+		--armor $TARBALL
 	popd
 }