Merge remote-tracking branch 'nl6720/gpg-options'

* nl6720/gpg-options:
  signature.py: enforce sane gpg options

arch_release_promotion/signature.py

@@ -46,6 +46,9 @@ def sign_file(path: Path, developer: str, gpgkey: str) -> int:
     return run(
         [
             "gpg",
+            "--batch",
+            "--no-armor",
+            "--no-include-key-block",
             "--sender",
             developer,
             "--default-key",

tests/test_signature.py

@@ -29,6 +29,9 @@ def test_sign_file(run_mock: Mock) -> None:
         call(
             [
                 "gpg",
+                "--batch",
+                "--no-armor",
+                "--no-include-key-block",
                 "--sender",
                 developer,
                 "--default-key",