feat(entrypoing.sh): add gpg sign

fix: check_consistency beign ignored

* feat(action.yml): add `gpg` inputs

Add input for GPG key and passphrase and whether or not to sign.

* feat(entrypoing.sh): add `gpg` sign

Add `-s` to `bump` command if `gpg_sign` is 'true'.

* fix(entrypoint.sh): set git config

Set `gpg.program`, `commit.gpgsign`, and `tag.gpgsign`.

* fix(gpg): add `signingkey`

Git requires `signingkey` to sign commits and tags.

feat(debug): add option for debug output

* fix(signingkey): specify UID

Git takes the UID for the signing key, not the key itself.

* fix(entrypoint.sh): add `gpg.program`

Add `gpg.program` to Git config.

* feat(entrypoint.sh): write `gpg` script

Use bash script to configure the GPG agent, import keys, set the
passphrase, and configure Git.

* fix(entrypoint.sh): replace `systemctl`

Use `service` as `systemctl` is not on GitHub Actions runners.

* fix(entrypoint.sh): remove `sudo`

* Revert "fix(entrypoint.sh): replace `systemctl`"

This reverts commit 2cf68aa.

* Revert "feat(entrypoint.sh): write `gpg` script"

This reverts commit a1c8571.

* Revert "fix(entrypoint.sh): add `gpg.program`"

This reverts commit 94d316f.

* fix(entrypoint.sh): remove signing commits

Only sign tags. It may be that `commitizen` only supports signing tags.

See: commitizen-tools/commitizen#616

* fix(entrypoint.sh): remove signing configs

Remove `tag.gpgsign` and `commit.gpgsign` from local Git config.

* fix(entrypoint.sh): remove `--gpg-sign`

See if Git will sign for us instead of through `cz`.

* fix(entrypoint.sh): add `commit.gpgsign`

Remove specifying `gpg.program` and add `commit.gpgsign` back.

* fix(entrypoint.sh): add `gpg-sign` back

Add `--gpg-sign` back to `commitizen`.

* fix(entrypoint.sh): move `--gpg-sign` after bump

Switch `--gpg-sign` applies to `bump` subcommand.

* fix(entrypoint.sh): move `--debug`

Move `--debug` switch to after `bump` command.

* Revert "fix(entrypoint.sh): move `--debug`"

This reverts commit e543aff.

* fix(entrypoint.sh): add `commit.gpgsign`

* ci(test): add `gpg -K` to stdout

* ci(test): more printouts

* ci(test): even more printouts

* ci(test): print which `gpg` is running

* ci(test): let `import-gpg` setup `gpg`

* ci(test): print `gpg --version`

* feat(ci): run in docker container

* Revert "feat(ci): run in docker container"

This reverts commit 3b2cae5.

Closes: #50

Closes: #53 
Co-authored-by: Hendry, Adam <adam.hendry@metronic.com>

Author: adam-grant-hendry

Diff for: action.yml

@@ -72,6 +72,17 @@ inputs:
     description: "Manually specify the desired increment"
     required: false
   check_consistency:
-    default: false
+    default: 'false'
     description: "check consistency among versions defined in commitizen configuration and version_files"
     required: false
+  gpg_sign:
+    description: >
+      If true, use GPG to sign commits and tags (for git operations). Requires separate
+      setup of GPG key and passphrase in GitHub Actions (e.g. with the action
+      crazy-max/ghaction-import-gpg)
+    required: false
+    default: "false"
+  debug:
+    description: "If true, prints debug output to GitHub Actions stdout."
+    required: false
+    default: "false"

Diff for: entrypoint.sh

@@ -1,7 +1,9 @@
-#!/bin/bash
+#!/usr/bin/env bash
 
 set -e
 
+gpg --version
+
 if [[ -z $INPUT_GITHUB_TOKEN ]]; then
   echo 'Missing input "github_token: ${{ secrets.GITHUB_TOKEN }}".' >&2
   exit 1
@@ -29,10 +31,16 @@ echo "Commitizen version: $(cz version)"
 PREV_REV="$(cz version --project)"
 
 CZ_CMD=('cz')
+if [[ $INPUT_DEBUG == 'true' ]]; then
+  CZ_CMD+=('--debug')
+fi
 if [[ $INPUT_NO_RAISE ]]; then
   CZ_CMD+=('--no-raise' "$INPUT_NO_RAISE")
 fi
 CZ_CMD+=('bump' '--yes')
+if [[ $INPUT_GPG_SIGN == 'true' ]]; then
+  CZ_CMD+=('--gpg-sign')
+fi
 if [[ $INPUT_DRY_RUN == 'true' ]]; then
   CZ_CMD+=('--dry-run')
 fi