configure gitsign

exoscale · Feb 29, 2024 · 9502a85 · 9502a85
1 parent 7d97b05
commit 9502a85
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/.github/workflows/sscs.yaml b/.github/workflows/sscs.yaml
@@ -15,4 +15,8 @@ jobs:
       - name: verify commit signature
         shell: bash
         run: |
+          git config --local commit.gpgsign true  # Sign all commits
+          git config --local tag.gpgsign true  # Sign all tags
+          git config --local gpg.x509.program gitsign  # Use gitsign for signing
+          git config --local gpg.format x509  # gitsign expects x509 args
           gitsign verify --certificate-identity-regexp='sauterp.*' --certificate-oidc-issuer='https://github.com/login/oauth' HEAD