mscharley / mscharley/dependency-changesets-action

Feature request: Support creating signed commits

Open
#232 4 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

enhancement
Dominant language
TypeScript
Stars
30
Forks
7
Avg merge
1m
Merged PRs (30d)
1

Description

It doesn't seem like it's currently possible to configure the action to create signed commits.

Would it be possible to add support for this? I would've assumed that running https://github.com/crazy-max/ghaction-import-gpg with git_commit_gpgsign: true before this action would be enough to make the commits signed automatically but that doesn't seem to be working.

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start by inspecting the action's commit-creation entry points and workflow configuration; no specific files or tests are named in the issue. Compare the behavior with crazy-max/ghaction-import-gpg and determine how signing should be configured. Done means the action can create signed commits when requested and verifies that behavior in the project's checks.

Written by the indexing model from the issue text.

Assessment

Tech stack
git, github-actions, typescript
Domain
ci-cd, devops, security
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.