Invalid signature

Drone Support
1

hi all，
I used signatures to secure my yml files, but in the drone I still had to manually approve them every time. What went wrong?

my .drone.yml :

kind: template
load: build-node.yaml
name: test-pipeline

the signed document

---
kind: template
load: build-node.yaml
name: test-pipeline
---
kind: signature
hmac: 20afe7b91d4b194601f82ef36433af167cf8fb685f32c2a24f48412ed44f9a31

...

update:
Well, I’ve found that not using templates is normal. Using template signatures is problematic.

2

@bradrydzewski Great summoning！ :smiley:

3

some body help ? :smiling_face_with_tear: :smiling_face_with_tear:

4

My guess is that signatures cannot be combined with templates, I am trying to verify this.

5

It is said that you can validate yml files using custom services, but this adds another layer of complexity. I still want the template and signature to be used together.