From a2f0af9031f3e5fab44dd14c63536e370fef8d1f Mon Sep 17 00:00:00 2001
From: lincube <lincube3@hotmail.com>
Date: Mon, 20 Apr 2026 14:56:27 +0800
Subject: [PATCH] ci: ensure pdcc signing passphrase env is always set

---
 .github/workflows/release.yml | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 065cc81..193ab13 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -728,6 +728,7 @@ jobs:
       PDC_ENDPOINT: ${{ vars.PDC_ENDPOINT }}
       PDC_TOKEN: ${{ secrets.PDC_TOKEN }}
       PDC_SIGNING_KEY: ${{ secrets.PDC_SIGNING_KEY }}
+      PDC_SIGNING_KEY_PS: ${{ secrets.PDC_SIGNING_KEY_PS }}
       UPDATE_PRIVATE_KEY_PEM: ${{ secrets.UPDATE_PRIVATE_KEY_PEM }}
       S3_ACCESS_KEY: ${{ secrets.S3_ACCESS_KEY }}
       S3_SECRET_KEY: ${{ secrets.S3_SECRET_KEY }}
@@ -899,7 +900,12 @@ jobs:
           $env:PDC_Token = $env:PDC_TOKEN
           $env:S3_AccessKey = $env:S3_ACCESS_KEY
           $env:S3_SecretKey = $env:S3_SECRET_KEY
-          $env:PDC_SigningKeyPs = ""
+          $signingKeyPs = $env:PDC_SIGNING_KEY_PS
+          if ([string]::IsNullOrWhiteSpace($signingKeyPs)) {
+            # Keep a non-empty value so PDCC required-env check passes on Linux runners.
+            $signingKeyPs = " "
+          }
+          $env:PDC_SigningKeyPs = $signingKeyPs
           $signingKey = $env:PDC_SIGNING_KEY
           if ([string]::IsNullOrWhiteSpace($signingKey)) {
             $signingKey = $env:UPDATE_PRIVATE_KEY_PEM