diff --git a/hack/release/smoke_test/verify_all.sh b/hack/release/smoke_test/verify_all.sh index 89f559bf..38c6ddec 100755 --- a/hack/release/smoke_test/verify_all.sh +++ b/hack/release/smoke_test/verify_all.sh @@ -112,12 +112,11 @@ echo "Download all artifacts and verify signatures" gpg --verify "${artifact}.asc" "${artifact}" \ || { echo "Invalid signature for ${artifact}. Aborting!"; exit 1; } fi + # If a helm chart has a provenance file, and a GPG Key was provided, then verify the provenance file + if [[ -f "${artifact}.prov" && -n "${GPG_KEY:-}" ]]; then + helm verify "${artifact}" + fi done - - # If a helm chart has a provenance file, and a GPG Key was provided, then verify the provenance file - if [[ -f "${artifact}.prov" && -n "${GPG_KEY:-}" ]]; then - helm verify "${artifact}" - fi ) done