siderolabs / conform

Policy enforcement for your pipelines.
Mozilla Public License 2.0
432 stars 45 forks source link

feat: provide gpg identity signature check #206

Closed smira closed 3 years ago

smira commented 3 years ago

Breaking change: .conform.yaml gpg: bool field was changed to be a structure:

gpg:
  required: true
  identity:
    gitHubOrganization: talos-systems

(identity is not required)

This enforces that GPG signature should come from one the members of the GitHub organization to succeed, i.e. commit is signed by the member of the organization.

Signed-off-by: Andrey Smirnov andrey.smirnov@talos-systems.com

smira commented 3 years ago

/approve

smira commented 3 years ago
POLICY         CHECK                        STATUS        MESSAGE                                                              
commit         Header Length                PASS          Header is 40 characters                                              
commit         Imperative Mood              PASS          Commit begins with imperative verb                                   
commit         Header Case                  PASS          Header case is valid                                                 
commit         Header Last Character        PASS          Header last character is valid                                       
commit         DCO                          PASS          Developer Certificate of Origin was found                            
commit         GPG                          PASS          GPG signature found                                                  
commit         GPG Identity                 PASS          Signed by "Andrey Smirnov <andrey.smirnov@talos-systems.com>"        
commit         Conventional Commit          PASS          Commit message is a valid conventional commit                        
commit         Spellcheck                   PASS          Commit contains 0 misspellings                                       
commit         Number of Commits            PASS          HEAD is 1 commit(s) ahead of refs/heads/master                       
commit         Commit Body                  PASS          Commit body is valid                                                 
license        File Header                  PASS          All files have a valid license header   
smira commented 3 years ago

/m --ff