From a7971397973373e17b651883bcb327e3e1dc6a11 Mon Sep 17 00:00:00 2001
From: Debdut Chakraborty <debdut.chakraborty@rocket.chat>
Date: Mon, 30 Mar 2026 19:23:12 +0530
Subject: [PATCH 1/2] feat: add assertion to gh release

---
 .github/workflows/release.yml | 24 +++++++++++++++++++-----
 1 file changed, 19 insertions(+), 5 deletions(-)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index b0ce3c72..d362cf27 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -18,6 +18,10 @@ on:
     secrets:
       snapcraft-credential:
         required: true
+      snapcraft-key:
+        required: true
+      snapcraft-key-passphrase:
+        required: true
       github-token:
         required: true
 
@@ -58,14 +62,24 @@ jobs:
           name: ${{ inputs.snap-artifact-key }}
           path: /tmp
 
-      - run: ls /tmp
-
-      
-
+      - run: |
+          ls /tmp
+          snap_file=${ROCKETCHAT_SNAP}
+          test -f $snap_file
+          test -f ~/.snap/gnupg || mkdir -p ~/.snap/gnupg
+          echo "${{ secrets.snapcraft-key }}" | gpg --batch --import
+          snapcraft sign-build $snap_file --key-name snapcraft-builds --passphrase ${{ secrets.snapcraft-key-passphrase }}
+          assertion=${snap_file%%.snap}.ack
+          test -f $assertion
+          echo "assertion=$assertion"
+        id: assertion
+        
       - name: 'Create release with artifact'
         uses: softprops/action-gh-release@v1
         with:
-          files: ${{ env.ROCKETCHAT_SNAP }}
+          files: |
+            ${{ env.ROCKETCHAT_SNAP }}
+            ${{ steps.assertion.outputs.assertion }}
           prerelease: false
           repository: ${{ env.REPO }}
           token: ${{ secrets.github-token }}

From 417380f407fe86a23ca7b5495bdd4843144e8535 Mon Sep 17 00:00:00 2001
From: Debdut Chakraborty <debdut.chakraborty@rocket.chat>
Date: Mon, 30 Mar 2026 19:24:43 +0530
Subject: [PATCH 2/2] Add snapcraft key and passphrase to workflow

---
 .github/workflows/aio_manual.yml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/.github/workflows/aio_manual.yml b/.github/workflows/aio_manual.yml
index 7f9b2531..83282a86 100644
--- a/.github/workflows/aio_manual.yml
+++ b/.github/workflows/aio_manual.yml
@@ -95,3 +95,5 @@ jobs:
     secrets:
       snapcraft-credential: ${{ secrets.SNAPCRAFT_STORE_CREDENTIALS }}
       github-token: ${{ secrets.GH_TOKEN_PERSONAL2}}
+      snapcraft-key: ${{ secrets.SNAPCRAFT_KEY }}
+      snapcraft-key-passphrase: ${{ secrets.SNAPCRAFT_KEY_PASSPHRASE }}