build: Add key import to sign releases

janw · Jan 25, 2024 · f74adaa · f74adaa
1 parent 54daca7
commit f74adaa
Showing 1 changed file with 30 additions and 10 deletions.
diff --git a/.github/workflows/bump-version.yaml b/.github/workflows/bump-version.yaml
@@ -4,6 +4,7 @@ on:
   push:
     branches:
       - main
+      - add-signing-key
 
 jobs:
   bump-version:
@@ -24,15 +25,34 @@ jobs:
             CHANGELOG.md
           sparse-checkout-cone-mode: false
 
-      - name: Create bump and changelog
-        uses: commitizen-tools/commitizen-action@master
+      - name: Import GPG key
+        uses: crazy-max/ghaction-import-gpg@v6
         with:
-          github_token: ${{ secrets.PERSONAL_ACCESS_TOKEN }}
-          changelog_increment_filename: body.md
+          gpg_private_key: ${{ secrets.GPG_PRIVATE_KEY }}
+          passphrase: ${{ secrets.GPG_PASSPHRASE }}
+          git_user_signingkey: true
+          git_commit_gpgsign: true
+          git_tag_gpgsign: true
+          fingerprint: 7A1EF19E1F266D03D46BE9F27438C994EFDC613D
 
-      - name: Create GitHub release
-        uses: ncipollo/release-action@v1
-        with:
-          tag: v${{ env.REVISION }}
-          bodyFile: "body.md"
-          skipIfReleaseExists: true
+      - name: List keys
+        run: gpg -K
+
+      - run : 'echo testing > file.txt'
+      - run: git add file.txt
+      - run: git commit
+      - run: git show
+      - run: git verify-commit HEAD
+
+      # - name: Create bump and changelog
+      #   uses: commitizen-tools/commitizen-action@master
+      #   with:
+      #     github_token: ${{ secrets.PERSONAL_ACCESS_TOKEN }}
+      #     changelog_increment_filename: body.md
+
+      # - name: Create GitHub release
+      #   uses: ncipollo/release-action@v1
+      #   with:
+      #     tag: v${{ env.REVISION }}
+      #     bodyFile: "body.md"
+      #     skipIfReleaseExists: true