codeigniter4 / shield

Authentication and Authorization for CodeIgniter 4
https://shield.codeigniter.com
MIT License
352 stars 130 forks source link

Dev: github action for check GPG KEY #792

Open datamweb opened 1 year ago

datamweb commented 1 year ago

Shield does not accept commits that are not signed with GPG KEY, so there is an Github Action to automatically check the signature of commits and add a tag GPG-Signing needed and a comment to explain:

How to setup a GPG key How to GPG-Signing Old Commits

kenjis commented 12 months ago

This is a shell script to check GPG signature by ChatGPT.

#!/bin/bash

commit_hash=$1

if [ -z "$commit_hash" ]; then
    echo "Usage: $0 <commit-hash>"
    exit 1
fi

signature=$(git show "$commit_hash" --show-signature 2>&1 | grep -o "gpg: Good signature")
if [ -z "$signature" ]; then
    echo "Error: Commit $commit_hash does not have a valid GPG signature."
    exit 1
fi

echo "Commit $commit_hash has a valid GPG signature."
kenjis commented 11 months ago

See https://github.com/codeigniter4/CodeIgniter4/pull/7938

datamweb commented 5 months ago

Smart Commenting are not working well at the moment.