Only chmod 644 files that sigstore sign produced just now

ambv · ambv · commit 6846215910b2 · 2022-10-11T21:08:48.000+02:00
diff --git a/add-to-pydotorg.py b/add-to-pydotorg.py
@@ -243,6 +243,9 @@ def has_sigstore_signature(filename):
     if unsigned_files:
         print('Signing release files with Sigstore')
         run_cmd(['python3', '-m', 'sigstore', 'sign', '--oidc-disable-ambient-providers'] + unsigned_files)
+        for file in unsigned_files:
+            run_cmd(['chmod', '644', file + '.sig'])
+            run_cmd(['chmod', '644', file + '.crt'])
     else:
         print('All release files already signed with Sigstore')
 
