# Invalid signature

**URL:** https://drone.discourse.group/t/invalid-signature/13541
**Category:** Drone Support
**Created:** [March 1, 2023, 2:20pm UTC](https://drone.discourse.group/t/invalid-signature/13541 "2023-03-01T14:20:32Z")
**Posts on this page:** 5
**Page:** 1

<div class="post-metadata">

### Author: ![Bluebang](https://yyz1.discourse-cdn.com/flex003/user_avatar/drone.discourse.group/bluebang/32/8647_2.png) [@Bluebang](https://drone.discourse.group/u/Bluebang)
#### Post date: [March 1, 2023, 2:20pm UTC](https://drone.discourse.group/t/invalid-signature/13541/1 "2023-03-01T14:20:32Z")

</div>

hi all，  
I used signatures to secure my yml files, but in the drone I still had to manually approve them every time. What went wrong?

my .drone.yml :

```auto
kind: template
load: build-node.yaml
name: test-pipeline

```

the signed document

```auto
---
kind: template
load: build-node.yaml
name: test-pipeline
---
kind: signature
hmac: 20afe7b91d4b194601f82ef36433af167cf8fb685f32c2a24f48412ed44f9a31

...

```

update:  
Well, I’ve found that not using templates is normal. Using template signatures is problematic.

---

<div class="post-metadata">

### Author: ![Bluebang](https://yyz1.discourse-cdn.com/flex003/user_avatar/drone.discourse.group/bluebang/32/8647_2.png) [@Bluebang](https://drone.discourse.group/u/Bluebang)
#### Post date: [March 1, 2023, 2:36pm UTC](https://drone.discourse.group/t/invalid-signature/13541/2 "2023-03-01T14:36:21Z")

</div>

@bradrydzewski Great summoning！ 😃

---

<div class="post-metadata">

### Author: ![Bluebang](https://yyz1.discourse-cdn.com/flex003/user_avatar/drone.discourse.group/bluebang/32/8647_2.png) [@Bluebang](https://drone.discourse.group/u/Bluebang)
#### Post date: [March 4, 2023, 6:30am UTC](https://drone.discourse.group/t/invalid-signature/13541/3 "2023-03-04T06:30:42Z")

</div>

some body help ? 🥲 🥲

---

<div class="post-metadata">

### Author: ![jimsheldon](https://yyz1.discourse-cdn.com/flex003/user_avatar/drone.discourse.group/jimsheldon/32/7760_2.png) [@jimsheldon](https://drone.discourse.group/u/jimsheldon)
#### Post date: [March 10, 2023, 9:26pm UTC](https://drone.discourse.group/t/invalid-signature/13541/4 "2023-03-10T21:26:44Z")

</div>

My guess is that signatures cannot be combined with templates, I am trying to verify this.

---

<div class="post-metadata">

### Author: ![Bluebang](https://yyz1.discourse-cdn.com/flex003/user_avatar/drone.discourse.group/bluebang/32/8647_2.png) [@Bluebang](https://drone.discourse.group/u/Bluebang)
#### Post date: [March 11, 2023, 12:40pm UTC](https://drone.discourse.group/t/invalid-signature/13541/5 "2023-03-11T12:40:29Z")

</div>

It is said that you can validate yml files using custom services, but this adds another layer of complexity. I still want the template and signature to be used together.