From 5861d739645f18f7f79bc3abf84b9ff490c47852 Mon Sep 17 00:00:00 2001
From: lincube <lincube3@hotmail.com>
Date: Mon, 20 Apr 2026 14:44:00 +0800
Subject: [PATCH] ci: fallback pdcc signing key to update private key

---
 .github/workflows/release.yml | 9 +++++++--
 1 file changed, 7 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 546cc53..065cc81 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -900,9 +900,14 @@ jobs:
           $env:S3_AccessKey = $env:S3_ACCESS_KEY
           $env:S3_SecretKey = $env:S3_SECRET_KEY
           $env:PDC_SigningKeyPs = ""
-          if ([string]::IsNullOrWhiteSpace($env:PDC_SigningKey)) {
-            $env:PDC_SigningKey = $env:PDC_SIGNING_KEY
+          $signingKey = $env:PDC_SIGNING_KEY
+          if ([string]::IsNullOrWhiteSpace($signingKey)) {
+            $signingKey = $env:UPDATE_PRIVATE_KEY_PEM
           }
+          if ([string]::IsNullOrWhiteSpace($signingKey)) {
+            throw "Missing PDC signing key: PDC_SIGNING_KEY or UPDATE_PRIVATE_KEY_PEM."
+          }
+          $env:PDC_SigningKey = $signingKey
 
           $stageRoot = Join-Path $PWD "pdc-stage"
           $payloadRoot = Join-Path $PWD "payload-artifacts"