temp

Signed-off-by: Frederic BIDON <fredbi@yahoo.com>

Author: fredbi

.github/workflows/auto-merge.yml

@@ -2,6 +2,24 @@ name: Dependabot auto-merge
 
 on:
   workflow_call:
+    inputs:
+      enable-organization-bot:
+        description: |
+          Enable automatic approval and merge of PRs initiated by a bot.
+
+        type: boolean
+        required: false
+        default: true
+      organization-bot:
+        description: |
+          The bot name for your organization,
+          for which you wish to enable auto-merge.
+
+          Example: bot-go-openapi[bot]
+
+        type: string
+        required: false
+        default: 'bot-go-openapi[bot]'
 
 permissions:
   contents: read
@@ -45,7 +63,7 @@ jobs:
       contents: write
       pull-requests: write
     runs-on: ubuntu-latest
-    if: ${{ github.event.pull_request.user.login == 'bot-go-openapi[bot]' }}
+    if: ${{ inputs.enable-organizaton-bot == 'true' && github.event.pull_request.user.login == inputs.organization-bot }}
     env:
       PR_URL: ${{github.event.pull_request.html_url}}
       GH_TOKEN: ${{secrets.GITHUB_TOKEN}}

.github/workflows/bump-release.yml

@@ -42,6 +42,34 @@ on:
           (use "|" to replace end of line).
         required: false
         type: string
+      env_gpg_private_key:
+        description: |
+          PGP tag-signing by a bot user.
+
+          This is the name of the secret to sign tags.
+          It contains an armored GPG private key.
+          Tags are not signed if not provided.
+        required: false
+        type: string
+        default: CI_BOT_GPG_PRIVATE_KEY
+      env_passphrase:
+        description: |
+          PGP tag-signing by a bot user.
+
+          This is the name of the secret that containts the passphrase to unlock the GPG key.
+          Tags are not signed if not provided.
+        required: false
+        type: string
+        default: CI_BOT_GPG_PASSPHRASE
+      env_fingerprint:
+        description: |
+          PGP tag-signing by a bot user.
+
+          This is the name of the secret that contains the fingerprint of the GPG key.
+          Tags are not signed if not provided.
+        required: false
+        type: string
+        default: CI_BOT_SIGNING_KEY
 
 jobs:
   tag-release: