Secure script auto-execution pipeline

Setup

Generate (or use an existing GPG signing key).

$ gpg --gen-key
$ gpg --armor --export "[your key id]"

Then edit secex_execute and replace the example public key with yours.

Deploying new scripts

$ secex_sign myscript.sh

Automatic execution

$ secex_execute https://url/to/myscript.sh