Skip to content

Commit 573918b

Browse files
PlaneshifterPlaneshifter
committed
build: sign commits via stdlib-bot GPG key
1 parent fe1a276 commit 573918b

File tree

4 files changed

+42
-19
lines changed

4 files changed

+42
-19
lines changed

‎.github/workflows/markdown_related_packages.yml‎

Lines changed: 11 additions & 11 deletions
Original file line numberDiff line numberDiff line change
@@ -99,6 +99,16 @@ jobs:
9999
run: |
100100
rm -rf .git/hooks
101101
102+
# Import GPG key to sign commits:
103+
- name: 'Import GPG key to sign commits'
104+
# Pin action to full length commit SHA
105+
uses: crazy-max/ghaction-import-gpg@82a020f1f7f605c65dd2449b392a52c3fcfef7ef # v6.0.0
106+
with:
107+
gpg_private_key: ${{ secrets.STDLIB_BOT_GPG_PRIVATE_KEY }}
108+
passphrase: ${{ secrets.STDLIB_BOT_GPG_PASSPHRASE }}
109+
git_user_signingkey: true
110+
git_commit_gpgsign: true
111+
102112
# Pick random READMEs from the `lib/node_modules/@stdlib` directory:
103113
- name: 'Pick random READMEs from the `lib/node_modules/@stdlib` directory'
104114
id: random-readmes
@@ -130,17 +140,6 @@ jobs:
130140
fi
131141
timeout-minutes: 10
132142

133-
# Import GPG key to sign commits:
134-
- name: 'Import GPG key to sign commits'
135-
if: steps.update-related-packages.outputs.changed == 'true'
136-
# Pin action to full length commit SHA
137-
uses: crazy-max/ghaction-import-gpg@82a020f1f7f605c65dd2449b392a52c3fcfef7ef # v6.0.0
138-
with:
139-
gpg_private_key: ${{ secrets.STDLIB_BOT_GPG_PRIVATE_KEY }}
140-
passphrase: ${{ secrets.STDLIB_BOT_GPG_PASSPHRASE }}
141-
git_user_signingkey: true
142-
git_commit_gpgsign: true
143-
144143
# Create a pull request with the changes:
145144
- name: 'Create pull request'
146145
id: cpr
@@ -156,6 +155,7 @@ jobs:
156155
157156
commit-message: 'docs: update related packages sections'
158157
committer: 'stdlib-bot <82920195+stdlib-bot@users.noreply.github.com>'
158+
signoff: true
159159
token: ${{ secrets.PULL_REQUEST_TOKEN }}
160160
labels: |
161161
documentation

‎.github/workflows/markdown_tocs.yml‎

Lines changed: 12 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -106,6 +106,16 @@ jobs:
106106
run: |
107107
rm -rf .git/hooks
108108
109+
# Import GPG key to sign commits:
110+
- name: 'Import GPG key to sign commits'
111+
# Pin action to full length commit SHA
112+
uses: crazy-max/ghaction-import-gpg@82a020f1f7f605c65dd2449b392a52c3fcfef7ef # v6.0.0
113+
with:
114+
gpg_private_key: ${{ secrets.STDLIB_BOT_GPG_PRIVATE_KEY }}
115+
passphrase: ${{ secrets.STDLIB_BOT_GPG_PASSPHRASE }}
116+
git_user_signingkey: true
117+
git_commit_gpgsign: true
118+
109119
# Create a pull request with the updated tables of contents:
110120
- name: 'Create pull request'
111121
id: cpr
@@ -119,7 +129,8 @@ jobs:
119129
- updates namespace table of contents
120130
121131
commit-message: 'docs: update namespace table of contents'
122-
committer: 'stdlib-bot <noreply@stdlib.io>'
132+
signoff: true
133+
committer: 'stdlib-bot <82920195+stdlib-bot@users.noreply.github.com>'
123134
token: ${{ secrets.PULL_REQUEST_TOKEN }}
124135
labels: |
125136
documentation

‎.github/workflows/namespace_declarations.yml‎

Lines changed: 7 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -90,6 +90,11 @@ jobs:
9090
run: |
9191
make list-pkgs-namespaces | node lib/node_modules/@stdlib/_tools/scripts/create_namespace_types.js
9292
93+
# Disable Git hooks:
94+
- name: 'Disable Git hooks'
95+
run: |
96+
rm -rf .git/hooks
97+
9398
# Import GPG key to sign commits:
9499
- name: 'Import GPG key to sign commits'
95100
# Pin action to full length commit SHA
@@ -100,11 +105,6 @@ jobs:
100105
git_user_signingkey: true
101106
git_commit_gpgsign: true
102107

103-
# Disable Git hooks:
104-
- name: 'Disable Git hooks'
105-
run: |
106-
rm -rf .git/hooks
107-
108108
# Create a pull request with the updated declarations:
109109
- name: 'Create pull request'
110110
id: cpr
@@ -118,7 +118,8 @@ jobs:
118118
- updates namespace TypeScript declarations
119119
120120
commit-message: 'feat: update namespace TypeScript declarations'
121-
committer: 'stdlib-bot <noreply@stdlib.io>'
121+
committer: 'stdlib-bot <82920195+stdlib-bot@users.noreply.github.com>'
122+
signoff: true
122123
token: ${{ secrets.PULL_REQUEST_TOKEN }}
123124
labels: |
124125
documentation

‎.github/workflows/update_cli_permissions.yml‎

Lines changed: 12 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -77,6 +77,16 @@ jobs:
7777
run: |
7878
rm -rf .git/hooks
7979
80+
# Import GPG key to sign commits:
81+
- name: 'Import GPG key to sign commits'
82+
# Pin action to full length commit SHA
83+
uses: crazy-max/ghaction-import-gpg@82a020f1f7f605c65dd2449b392a52c3fcfef7ef # v6.0.0
84+
with:
85+
gpg_private_key: ${{ secrets.STDLIB_BOT_GPG_PRIVATE_KEY }}
86+
passphrase: ${{ secrets.STDLIB_BOT_GPG_PASSPHRASE }}
87+
git_user_signingkey: true
88+
git_commit_gpgsign: true
89+
8090
# Create a pull request with the updated files:
8191
- name: 'Create pull request'
8292
id: cpr
@@ -85,7 +95,8 @@ jobs:
8595
with:
8696
title: 'fix: make CLI scripts executable'
8797
commit-message: 'fix: make CLI scripts executable'
88-
committer: 'stdlib-bot <noreply@stdlib.io>'
98+
committer: 'stdlib-bot <82920195+stdlib-bot@users.noreply.github.com>'
99+
signoff: true
89100
body: |
90101
This PR changes the permissions of project `cli` scripts to be executable.
91102
token: ${{ secrets.PULL_REQUEST_TOKEN }}

0 commit comments

Comments
 (0)