Merge pull request #689 from aquaproj/ci-add-workflow-check-commit-ve…

…rified ci: add a workflow to check if commits in pull requests are verified
aquaproj · Dec 28, 2024 · 939b1ad · 939b1ad
2 parents 4d3dfa4 + 3d4f5fc
commit 939b1ad
Showing 1 changed file with 14 additions and 0 deletions.
diff --git a/.github/workflows/check-commit-signing.yaml b/.github/workflows/check-commit-signing.yaml
@@ -0,0 +1,14 @@
+---
+name: Check if all commits are signed
+on:
+  pull_request_target:
+    branches: [main]
+concurrency:
+  group: ${{ github.workflow }}--${{ github.head_ref }} # github.ref is unavailable in case of pull_request_target
+  cancel-in-progress: true
+jobs:
+  check-commit-signing:
+    uses: suzuki-shunsuke/check-commit-signing-workflow/.github/workflows/check.yaml@547eee345f56310a656f271ec5eaa900af46b0fb # v0.1.0
+    permissions:
+      contents: read
+      pull-requests: write