build: sign commit via stdlib-bot GPG key

stdlib-js · Dec 25, 2023 · 6919d07 · 6919d07
1 parent 0d35f05
commit 6919d07
Show file tree

Hide file tree

Showing 3 changed files with 22 additions and 2 deletions.
diff --git a/.github/workflows/markdown_related_packages.yml b/.github/workflows/markdown_related_packages.yml
@@ -130,8 +130,8 @@ jobs:
           fi
         timeout-minutes: 10
 
-      # Import GPG key to sign commit:
-      - name: 'Import GPG key to sign commit'
+      # Import GPG key to sign commits:
+      - name: 'Import GPG key to sign commits'
         if: steps.update-related-packages.outputs.changed == 'true'
         # Pin action to full length commit SHA
         uses: crazy-max/ghaction-import-gpg@82a020f1f7f605c65dd2449b392a52c3fcfef7ef # v6.0.0

diff --git a/.github/workflows/namespace_declarations.yml b/.github/workflows/namespace_declarations.yml
@@ -90,6 +90,16 @@ jobs:
         run: |
           make list-pkgs-namespaces | node lib/node_modules/@stdlib/_tools/scripts/create_namespace_types.js
 
+      # Import GPG key to sign commits:
+      - name: 'Import GPG key to sign commits'
+        # Pin action to full length commit SHA
+        uses: crazy-max/ghaction-import-gpg@82a020f1f7f605c65dd2449b392a52c3fcfef7ef # v6.0.0
+        with:
+          gpg_private_key: ${{ secrets.STDLIB_BOT_GPG_PRIVATE_KEY }}
+          passphrase: ${{ secrets.STDLIB_BOT_GPG_PASSPHRASE }}
+          git_user_signingkey: true
+          git_commit_gpgsign: true
+
       # Disable Git hooks:
       - name: 'Disable Git hooks'
         run: |

diff --git a/.github/workflows/terminal.yml b/.github/workflows/terminal.yml
@@ -77,6 +77,16 @@ jobs:
           make init
         timeout-minutes: 5
 
+      # Import GPG key to sign commits:
+      - name: 'Import GPG key to sign commits'
+        # Pin action to full length commit SHA
+        uses: crazy-max/ghaction-import-gpg@82a020f1f7f605c65dd2449b392a52c3fcfef7ef # v6.0.0
+        with:
+          gpg_private_key: ${{ secrets.STDLIB_BOT_GPG_PRIVATE_KEY }}
+          passphrase: ${{ secrets.STDLIB_BOT_GPG_PASSPHRASE }}
+          git_user_signingkey: true
+          git_commit_gpgsign: true
+
       # Setup a terminal session:
       - name: 'Setup upterm session'
         # Pin action to full length commit SHA