Skip to content

Add sign-off and commit signature checks to CI workflow#873

Merged
mtmk merged 4 commits into
mainfrom
verify-pr-commits
May 27, 2025
Merged

Add sign-off and commit signature checks to CI workflow#873
mtmk merged 4 commits into
mainfrom
verify-pr-commits

Conversation

@mtmk

@mtmk mtmk commented May 25, 2025

Copy link
Copy Markdown
Member

Quick check to warn new contributors they need to sign commits.

image

Comment thread .github/workflows/format.yml Fixed
@mtmk
mtmk force-pushed the verify-pr-commits branch from c7e5939 to 41869ba Compare May 25, 2025 19:08
@mtmk
mtmk marked this pull request as draft May 25, 2025 20:09
@mtmk
mtmk force-pushed the verify-pr-commits branch 2 times, most recently from 41af9cd to a193e01 Compare May 27, 2025 13:37
@mtmk

mtmk commented May 27, 2025

Copy link
Copy Markdown
Member Author

image

This introduces a new workflow ensuring all commits are GPG signed.
@mtmk
mtmk force-pushed the verify-pr-commits branch from 581d305 to 3104371 Compare May 27, 2025 14:59
@mtmk

mtmk commented May 27, 2025

Copy link
Copy Markdown
Member Author

Comment thread .github/workflows/signoffs.yml Fixed
…in permissions

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
@mtmk
mtmk requested a review from Copilot May 27, 2025 15:05
@mtmk
mtmk marked this pull request as ready for review May 27, 2025 15:05

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull Request Overview

This pull request adds a new CI workflow that checks for commit sign-offs to help inform contributors that their commits require signatures. The key changes include updating the NATS.Net.sln file to include the new signoffs.yml workflow and introducing the signoffs.yml GitHub Actions workflow that validates commit signatures.

Reviewed Changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated 2 comments.

File Description
NATS.Net.sln Added reference to the signoffs workflow configuration
.github/workflows/signoffs.yml New workflow that iterates over commits to check for valid signatures

Comment thread .github/workflows/signoffs.yml Outdated
@@ -0,0 +1,27 @@
name: Sign-offs

Copilot AI May 27, 2025

Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

A hidden Byte Order Mark (BOM) appears at the beginning of this file; consider saving it as UTF-8 without BOM to avoid potential YAML parsing issues.

Suggested change
name: Sign-offs
name: Sign-offs

Copilot uses AI. Check for mistakes.
Comment thread .github/workflows/signoffs.yml Outdated
mtmk and others added 2 commits May 27, 2025 16:20
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
@mtmk
mtmk requested a review from scottf May 27, 2025 15:25

@scottf scottf left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Setup Developer Certificate of Origin

4 participants