Skip to content

chore(ci): add GPG commit signing to bot workflows#546

Closed
jdalton wants to merge 6 commits intomainfrom
chore/add-gpg-commit-signing
Closed

chore(ci): add GPG commit signing to bot workflows#546
jdalton wants to merge 6 commits intomainfrom
chore/add-gpg-commit-signing

Conversation

@jdalton
Copy link
Copy Markdown
Contributor

@jdalton jdalton commented Apr 3, 2026

Summary

  • Replace github-actions[bot] git config with setup-git-signing / cleanup-git-signing composite actions from socket-registry
  • Updated workflows: weekly-update.yml, generate.yml
  • Uses org-level BOT_GPG_PRIVATE_KEY secret for signed commits

Test plan

  • Trigger workflow_dispatch to verify GPG signing works

@jdalton
Copy link
Copy Markdown
Contributor Author

jdalton commented Apr 4, 2026

Split into three PRs: #547 (GPG signing), #548 (npmrc), #549 (CI hardening)

@jdalton jdalton closed this Apr 4, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant