Skip to content

chore(ci): add GPG commit signing to weekly-update workflow #1155

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
John-David Dalton (jdalton) wants to merge 9 commits into from
Closed

chore(ci): add GPG commit signing to weekly-update workflow #1155

Show file tree
Hide file tree
Changes from 2 commits
Commits
Show all changes
9 commits
Select commit Hold shift + click to select a range
5b6435d
Add format and format:check scripts for consistency
jdalton Apr 3, 2026
477e5ac
chore(ci): add GPG commit signing to weekly-update workflow
jdalton Apr 3, 2026
c0d41ca
chore(ci): improve Claude prompt structure in weekly-update
jdalton Apr 3, 2026
745d347
docs: add HTTP request rule — use @socketsecurity/lib/http-request, n…
jdalton Apr 4, 2026
ed1074e
docs: standardize HTTP request rule format in CLAUDE.md
jdalton Apr 4, 2026
c9fa9c3
fix: move minimum-release-age to pnpm-workspace.yaml
jdalton Apr 4, 2026
c71fcd5
fix(ci): harden weekly-update workflow
jdalton Apr 4, 2026
55cd901
fix(ci): use sonnet model for CI agent (haiku insufficient for test f…
jdalton Apr 4, 2026
8307c85
feat(ci): two-phase update — haiku for deps, sonnet escalation for te…
jdalton Apr 4, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
9 changes: 7 additions & 2 deletions .github/workflows/weekly-update.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -86,12 +86,14 @@ jobs:
GH_TOKEN: ${{ github.token }}
run: |
BRANCH_NAME="weekly-update-$(date +%Y%m%d)"
git config user.name "github-actions[bot]"
git config user.email "github-actions[bot]@users.noreply.github.com"
git remote set-url origin "https://x-access-token:${GH_TOKEN}@github.com/${{ github.repository }}.git"
git checkout -b "$BRANCH_NAME"
echo "branch=$BRANCH_NAME" >> $GITHUB_OUTPUT

- uses: SocketDev/socket-registry/.github/actions/setup-git-signing@6096b06b1790f411714c89c40f72aade2eeaab7c # main
with:
gpg-private-key: ${{ secrets.BOT_GPG_PRIVATE_KEY }}

- name: Run updating skill with Claude Code
id: claude
timeout-minutes: 30
Expand Down Expand Up @@ -182,6 +184,9 @@ jobs:
path: claude-output.log
retention-days: 7

- uses: SocketDev/socket-registry/.github/actions/cleanup-git-signing@6096b06b1790f411714c89c40f72aade2eeaab7c # main
if: always()

notify:
name: Notify results
needs: [check-updates, apply-updates]
Expand Down
2 changes: 2 additions & 0 deletions package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -23,6 +23,8 @@
"fix:all": "node scripts/fix.mjs --all",
"lint": "node scripts/lint.mjs",
"lint:all": "node scripts/lint.mjs --all",
"format": "oxfmt --write .",
"format:check": "oxfmt .",

@cursor cursor Bot Apr 3, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Format check script writes files instead of checking

Medium Severity

The format:check script runs oxfmt . without the --check flag. Since --write is oxfmt's default behavior, this command will silently modify files in place rather than performing a non-destructive formatting check. The --check flag is needed to only verify formatting and return a non-zero exit code on violations.

Fix in Cursor Fix in Web

"// Claude": "",
"claude": "pnpm --filter @socketsecurity/cli run claude --",
"// Type Checking": "",
Expand Down