Use publish-signed
Use bash in vcs-release