centersl/ansible-docs
1
0
Fork 0
mirror of https://github.com/ansible/ansible-documentation.git synced 2026-03-27 13:28:51 +07:00
Code Issues Packages Projects Releases Wiki Activity

update pip compile workflow to use GPG signing (#3533)

Browse Source 
* update pip compile workflow to use GPG signing

These changes update the reusable-pip-compile workflow to sign Ansible documentation bot commits with a private GPG key. Commits on the default branch must be signed but do not need to be verified.

* remove spaces added for readability

* Update .github/workflows/reusable-pip-compile.yml

Co-authored-by: Felix Fontein <felix@fontein.de>

---------

Co-authored-by: Felix Fontein <felix@fontein.de>
This commit is contained in:
Don Naro
2026-03-23 11:35:24 +00:00
committed by GitHub
parent 055a350c4f
commit ff332b8ff8
1 changed files with 11 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
.github/workflows/reusable-pip-compile.yml vendored
View File

@@ -60,6 +60,17 @@ jobs:
- name: Set up git committer
run: |
hacking/get_bot_user.sh "ansible-documentation-bot" "Ansible Documentation Bot"
- name: Set up GPG signing
env:
GPG_PRIVATE_KEY: ${{ secrets.BOT_GPG_PRIVATE_KEY }}
run: |
echo "${GPG_PRIVATE_KEY}" | gpg --batch --import
GPG_KEY_ID="$(gpg --list-secret-keys --keyid-format=long --with-colons | \
grep "^sec" | cut -d: -f5)"
git config user.signingkey "${GPG_KEY_ID}"
git config commit.gpgsign true
- name: "Use a branch named ${{ inputs.pr-branch }}"
env:
base_branch: "${{ inputs.base-branch }}"