ci: Update workflow to enable loading in a GPG signing key to the job.

tektronix · Oct 19, 2023 · 08c7ae6 · 08c7ae6
1 parent 3e3e952
commit 08c7ae6
Showing 1 changed file with 11 additions and 4 deletions.
diff --git a/.github/workflows/package-release.yml b/.github/workflows/package-release.yml
@@ -29,6 +29,15 @@ jobs:
           fetch-depth: 0
           token: ${{ secrets.TEK_OPENSOURCE_TOKEN }}
           persist-credentials: false
+      - name: Import GPG key for signing commits
+        id: import-gpg
+        uses: crazy-max/ghaction-import-gpg@v4
+        with:
+          gpg_private_key: ${{ secrets.TEK_OPENSOURCE_GPG_PRIVATE_KEY }}
+          passphrase: ${{ secrets.TEK_OPENSOURCE_GPG_PASSPHRASE }}
+          git_config_global: true
+          git_user_signingkey: true
+          git_commit_gpgsign: true
       - name: Set up Python
         uses: actions/setup-python@v4
         with:
@@ -45,10 +54,8 @@ jobs:
           root_options: --verbose --strict
           force: ${{ inputs.release_level }}
           github_token: ${{ secrets.TEK_OPENSOURCE_TOKEN }}
-          git_committer_name: Tektronix
-          git_committer_email: [email protected]
-          ssh_public_signing_key: ${{ secrets.TEK_OPENSOURCE_PUBLIC_KEY }}
-          ssh_private_signing_key: ${{ secrets.TEK_OPENSOURCE_PRIVATE_KEY }}
+          git_committer_name: ${{ steps.import-gpg.outputs.name }}
+          git_committer_email: ${{ steps.import-gpg.outputs.email }}
     outputs:
       built-version: ${{ steps.release.outputs.version }}
   pypi-build: