shield icon indicating copy to clipboard operation
shield copied to clipboard

Dev: github action for check GPG KEY

Open datamweb opened this issue 2 years ago • 3 comments

Shield does not accept commits that are not signed with GPG KEY, so there is an Github Action to automatically check the signature of commits and add a tag GPG-Signing needed and a comment to explain:

How to setup a GPG key How to GPG-Signing Old Commits

datamweb avatar Aug 18 '23 17:08 datamweb

This is a shell script to check GPG signature by ChatGPT.

#!/bin/bash

commit_hash=$1

if [ -z "$commit_hash" ]; then
    echo "Usage: $0 <commit-hash>"
    exit 1
fi

signature=$(git show "$commit_hash" --show-signature 2>&1 | grep -o "gpg: Good signature")
if [ -z "$signature" ]; then
    echo "Error: Commit $commit_hash does not have a valid GPG signature."
    exit 1
fi

echo "Commit $commit_hash has a valid GPG signature."

kenjis avatar Aug 24 '23 00:08 kenjis

See https://github.com/codeigniter4/CodeIgniter4/pull/7938

kenjis avatar Sep 21 '23 04:09 kenjis

Smart Commenting are not working well at the moment.

datamweb avatar Feb 24 '24 10:02 datamweb