From d3597e19da898c538033f78658f64f3ce32a7a16 Mon Sep 17 00:00:00 2001
From: Yurii Shynbuiev <yurii.shynbuiev@iohk.io>
Date: Thu, 12 Sep 2024 20:38:53 +0700
Subject: [PATCH] ci: modify the release.yml flow to make the release

Signed-off-by: Yurii Shynbuiev <yurii.shynbuiev@iohk.io>
Signed-off-by: goncalo-frade-iohk <goncalo.frade@iohk.io>
---
 .github/workflows/release.yml | 15 ++++++++++++---
 1 file changed, 12 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 1a4b27f8..2450426a 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -1,6 +1,9 @@
 ---
 name: Release sdk
 
+concurrency:
+  group: release
+
 on:
   workflow_dispatch:
 
@@ -10,7 +13,9 @@ jobs:
       ATALA_GITHUB_ACTOR: ${{ github.actor }}
       ATALA_GITHUB_TOKEN: ${{ secrets.IDENTUS_CI }}
       SLACK_WEBHOOK: ${{ secrets.SLACK_WEBHOOK }}
-
+    permissions:
+      contents: write
+      packages: write
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v3
@@ -23,12 +28,15 @@ jobs:
         with:
           node-version: "lts/*"
 
-      - uses: crazy-max/ghaction-import-gpg@v5
+      - uses: crazy-max/ghaction-import-gpg@v6
         id: import_gpg
         with:
-          gpg_private_key: ${{ secrets.GPG_PRIVATE_KEY }}
+          gpg_private_key: ${{ secrets.HYP_BOT_GPG_PRIVATE }}
+          passphrase: ${{ secrets.HYP_BOT_GPG_PASSWORD }}
           git_user_signingkey: true
           git_commit_gpgsign: true
+          git_config_global: true
+          git_tag_gpgsign: false
 
       - name: Release
         env:
@@ -36,6 +44,7 @@ jobs:
           GIT_COMMITTER_EMAIL: ${{ steps.import_gpg.outputs.email }}
           GIT_AUTHOR_NAME: ${{ steps.import_gpg.outputs.name }}
           GIT_COMMITTER_NAME: ${{ steps.import_gpg.outputs.name }}
+          GITHUB_TOKEN: ${{ secrets.IDENTUS_CI }}
         run: |
           npm install
           npx semantic-release