Closed Bo98 closed 2 months ago
Does GPG commit signing work here?
It will commit sign, but the existing setup-commit-signing
action isn't supported for configuring that. This replaces both that plus git push
- GitHub API will automatically sign the commit using the GitHub key.
An action that take commits and pushes changes via the GitHub API rather than the git CLI.
Why? GitHub Apps need to use the API in order to sign commits. You cannot add a commit signing key to a GitHub app.
Using this also reduces the number of secrets required. Instead of a token + a GPG passphrase, you now only need a token.
See the README for example usage paired with
actions/create-github-app-token@v1
.Will be used for https://github.com/Homebrew/brew/issues/17294.