Skip to content

fix: sign semantic-release commits #2230

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
MichaelMraka merged 1 commit into from
Jun 10, 2026
+13 −2
Merged

fix: sign semantic-release commits #2230

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
15 changes: 13 additions & 2 deletions .github/workflows/semantic-release.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -18,6 +18,19 @@ jobs:
- uses: actions/checkout@v6
with:
token: "${{ steps.app-token.outputs.token }}"
- name: Configure SSH commit signing
env:
SIGNING_KEY: ${{ secrets.SEMANTIC_RELEASE_SIGNING_KEY }}
Comment thread
MichaelMraka marked this conversation as resolved.
run: |
mkdir -p ~/.ssh
echo "$SIGNING_KEY" > ~/.ssh/signing_key
Comment thread
MichaelMraka marked this conversation as resolved.
chmod 600 ~/.ssh/signing_key
git config --global gpg.format ssh
git config --global user.signingkey ~/.ssh/signing_key
git config --global commit.gpgSign true
git config --global tag.gpgSign true
git config --global user.name 'vmaas-bot'
git config --global user.email '40663028+vmaas-bot@users.noreply.github.com'
- name: increment version, commit, push
run: |
DOC_FILE="docs/v3/openapi.json docs/admin/openapi.json"
Expand All @@ -28,8 +41,6 @@ jobs:
VERSION_NEXT=$(./scripts/increment_version.sh $VERSION $RELEASE_TYPE)
sed -i 's|\("version": "\)[^"]*\("\)$|'"\1$VERSION_NEXT\2|;" $DOC_FILE
echo $VERSION_NEXT >VERSION
git config --global user.name 'semantic-release'
git config --global user.email ''
git commit -am "${VERSION_NEXT}"
git push
git tag ${VERSION_NEXT}
Expand Down
Loading