Add signing to flake-update wf
All checks were successful
All checks were successful
This commit is contained in:
parent
667dca09d7
commit
2433846f88
9
.github/workflows/flake-update.yaml
vendored
9
.github/workflows/flake-update.yaml
vendored
@ -18,9 +18,18 @@ jobs:
|
|||||||
ref: master
|
ref: master
|
||||||
- uses: cachix/install-nix-action@v27
|
- uses: cachix/install-nix-action@v27
|
||||||
- name: configure git
|
- name: configure git
|
||||||
|
env:
|
||||||
|
SSH_PRIVKEY: ${{ secrets.BOT_SSH_PRIVKEY }}
|
||||||
|
SSH_PUBKEY: ${{ secrets.BOT_SSH_PUBKEY }}
|
||||||
run: |
|
run: |
|
||||||
|
echo "$SSH_PRIVKEY" > "$RUNNER_TEMP/id_ed25519"
|
||||||
|
echo "$SSH_PUBKEY" > "$RUNNER_TEMP/id_ed25519.pub"
|
||||||
|
chmod -R 0600 "$RUNNER_TEMP/id_ed25519.pub" "$RUNNER_TEMP/id_ed25519"
|
||||||
git config --global user.name 'torjus-bot'
|
git config --global user.name 'torjus-bot'
|
||||||
git config --global user.email 'torjus-bot@git.t-juice.club'
|
git config --global user.email 'torjus-bot@git.t-juice.club'
|
||||||
|
git config --global user.signingKey "$RUNNER_TEMP/id_ed25519.pub"
|
||||||
|
git config --global gpg.format ssh
|
||||||
|
git config --global commit.gpgsign true
|
||||||
- name: flake update
|
- name: flake update
|
||||||
run: nix flake update --commit-lock-file
|
run: nix flake update --commit-lock-file
|
||||||
- name: push
|
- name: push
|
||||||
|
Loading…
Reference in New Issue
Block a user