Homebrew / actions

🚀 Homebrew's GitHub Actions
BSD 2-Clause "Simplified" License
122 stars 39 forks source link

api-commit-and-push: add action #577

Closed Bo98 closed 2 months ago

Bo98 commented 2 months ago

An action that take commits and pushes changes via the GitHub API rather than the git CLI.

Why? GitHub Apps need to use the API in order to sign commits. You cannot add a commit signing key to a GitHub app.

Using this also reduces the number of secrets required. Instead of a token + a GPG passphrase, you now only need a token.

See the README for example usage paired with actions/create-github-app-token@v1.

Will be used for https://github.com/Homebrew/brew/issues/17294.

carlocab commented 2 months ago

Does GPG commit signing work here?

Bo98 commented 2 months ago

It will commit sign, but the existing setup-commit-signing action isn't supported for configuring that. This replaces both that plus git push - GitHub API will automatically sign the commit using the GitHub key.