feat: sign commits

konstructio · Feb 4, 2025 · 35e5757 · 35e5757
1 parent 98bf14a
commit 35e5757
Show file tree

Hide file tree

Showing 2 changed files with 11 additions and 7 deletions.
diff --git a/.github/workflows/release-package.yml b/.github/workflows/release-package.yml
@@ -37,16 +37,18 @@ jobs:
 
       - name: Checkout, bun, commit and push version change
         run: |
-          git config user.name "konstruct-bot"
+          echo "KBOT_PRIVATE_KEY" > /signingkey
+          git config user.name "konstruct-bot"]
           git config user.email "konstruct-bot@konstruct.io"
-          git fetch origin main
-          git checkout main
+          git config user.signingkey /signingkey
           npm version ${RELEASE_VERSION} --no-commit-hooks --no-git-tag-version
           git add package.json package-lock.json
-          git commit -m "🔖 release: bump version to ${RELEASE_VERSION}" --allow-empty --no-verify
+          git commit -S -m "🔖 release: bump version to ${RELEASE_VERSION}" --allow-empty --no-verify
+          git log --show-signature -1
           git push origin main
         env:
           GITHUB_TOKEN: ${{ secrets.KBOT_TOKEN }}
+          KBOT_PRIVATE_KEY: ${{ secrets.KBOT_PRIVATE_KEY }}
 
       - name: Authenticate with GitHub Packages
         run: echo "//npm.pkg.github.com/:_authToken=${{ secrets.KBOT_TOKEN }}" > ~/.npmrc

diff --git a/.github/workflows/update-changelog.yml b/.github/workflows/update-changelog.yml
@@ -40,12 +40,14 @@ jobs:
 
       - name: Commit and Push Changes
         run: |
+          echo "KBOT_PRIVATE_KEY" > /signingkey
           git config user.name "konstruct-bot"
           git config user.email "konstruct-bot@konstruct.io"
-          git fetch origin main
-          git checkout main
+          git config user.signingkey /signingkey
           git add CHANGELOG.md
-          git commit -m "🚀 chore: update changelog for the version ${RELEASE_VERSION}" --no-verify
+          git commit -S -m "🚀 chore: update changelog for the version ${RELEASE_VERSION}" --no-verify
+          git log --show-signature -1
           git push origin main
         env:
           GITHUB_TOKEN: ${{ secrets.KBOT_TOKEN }}
+          KBOT_PRIVATE_KEY: ${{ secrets.KBOT_PRIVATE_KEY }}