From 7df9b2c23612ee65891673383ef85984620fe8af Mon Sep 17 00:00:00 2001
From: Dmitry Nikolaev <dnikolaev@rocketsoftware.com>
Date: Mon, 20 Jul 2026 10:23:30 +0200
Subject: [PATCH] Update pipeline to sign the plugin

Signed-off-by: Dmitry Nikolaev <dnikolaev@rocketsoftware.com>
---
 .github/workflows/ibm-rmf-grafana.yml | 11 ++++++++++-
 grafana/rmf-app/CHANGELOG.md          |  2 +-
 grafana/rmf-app/go.mod                |  2 +-
 grafana/rmf-app/makefile              |  6 ++++--
 4 files changed, 16 insertions(+), 5 deletions(-)

diff --git a/.github/workflows/ibm-rmf-grafana.yml b/.github/workflows/ibm-rmf-grafana.yml
index 5a40b0c..d194ec9 100644
--- a/.github/workflows/ibm-rmf-grafana.yml
+++ b/.github/workflows/ibm-rmf-grafana.yml
@@ -51,7 +51,16 @@ jobs:
           working-directory: grafana/rmf-app
 
       - name: Build
-        run: make all
+        run: make build
+
+      - name: Sign
+        run: yarn sign
+        if: github.event_name != 'pull_request'
+        env:
+          GRAFANA_ACCESS_POLICY_TOKEN: ${{ secrets.GRAFANA_ACCESS_POLICY_TOKEN }}
+
+      - name: Package
+        run: make zip
 
       - name: Fetch Release Notes
         id: changelog
diff --git a/grafana/rmf-app/CHANGELOG.md b/grafana/rmf-app/CHANGELOG.md
index 2f9e50d..aefb7b9 100644
--- a/grafana/rmf-app/CHANGELOG.md
+++ b/grafana/rmf-app/CHANGELOG.md
@@ -1,6 +1,6 @@
 # Change Log
 
-## 2.0.1 (2026-07-17)
+## 2.0.1 (2026-07-20)
 
 - Updated dependencies to address known vulnerabilities.
 - Removed support for Grafana v10.
diff --git a/grafana/rmf-app/go.mod b/grafana/rmf-app/go.mod
index c7c22a9..5088e5a 100644
--- a/grafana/rmf-app/go.mod
+++ b/grafana/rmf-app/go.mod
@@ -1,6 +1,6 @@
 module github.com/IBM/RMF/grafana/rmf-app
 
-go 1.26.4
+go 1.26.5
 
 require (
 	github.com/VictoriaMetrics/fastcache v1.13.3
diff --git a/grafana/rmf-app/makefile b/grafana/rmf-app/makefile
index c24efb5..e135c50 100644
--- a/grafana/rmf-app/makefile
+++ b/grafana/rmf-app/makefile
@@ -4,7 +4,8 @@ default: help
 GRAFANA_PLUGIN_ID := $(shell jq -r '.id' src/plugin.json)
 GRAFANA_PLUGIN_VERSION := $(shell jq -r '.version' package.json)
 GRAFANA_PLUGIN_ARTIFACT := ibm-rmf-grafana-$(GRAFANA_PLUGIN_VERSION).zip
-GRAFANA_PLUGIN_ARTIFACT_CHECKSUM := $(GRAFANA_PLUGIN_ARTIFACT).md5
+GRAFANA_PLUGIN_ARTIFACT_MD5 := $(GRAFANA_PLUGIN_ARTIFACT).md5
+GRAFANA_PLUGIN_ARTIFACT_SHA1 := $(GRAFANA_PLUGIN_ARTIFACT).sha1
 RMF_QUERY_PARSER_PATH := ./src/datasource/parser/lib
 RMF_QUERY_PARSER_FILES := \
 	$(RMF_QUERY_PARSER_PATH)/RMFQueryLexer.ts \
@@ -86,7 +87,8 @@ zip: ## Zip the plugin
 	rm -rf build && mkdir build
 	cp -a dist "build/$(GRAFANA_PLUGIN_ID)"
 	cd build && zip -r "$(GRAFANA_PLUGIN_ARTIFACT)" "$(GRAFANA_PLUGIN_ID)"
-	cd build && md5sum "$(GRAFANA_PLUGIN_ARTIFACT)" > "$(GRAFANA_PLUGIN_ARTIFACT_CHECKSUM)"
+	cd build && md5sum "$(GRAFANA_PLUGIN_ARTIFACT)" > "$(GRAFANA_PLUGIN_ARTIFACT_MD5)"
+	cd build && sha1sum "$(GRAFANA_PLUGIN_ARTIFACT)" > "$(GRAFANA_PLUGIN_ARTIFACT_SHA1)"
 	rm -r "build/$(GRAFANA_PLUGIN_ID)"
 
 ##@ Helpers