feat(git): added commit signing + resetting of configured commiter after script run

Author: Rastusik

.env.dist

@@ -0,0 +1,7 @@
+GH_COMMITER_NAME=openswoole-bundle-bot
+GH_COMMITER_EMAIL=147276322+openswoole-bundle-bot@users.noreply.github.com
+GH_COMMITER_SIGNING_KEY=xxxx
+GH_TOKEN=xxxx
+DRY_RUN="0"
+DEBUG="1"
+GH_RELEASE_DRAFT="false"

.gitignore

@@ -0,0 +1 @@
+.env

Dockerfile

@@ -10,6 +10,7 @@ ENV CURRENT_VERSION="" \
     GH_REPOSITORY="openswoole-bundle/release-version-script" \
     GH_COMMITER_NAME="openswoole-bundle-bot" \
     GH_COMMITER_EMAIL="147276322+openswoole-bundle-bot@users.noreply.github.com" \
+    GH_COMMITER_SIGNING_KEY="xxxx" \
     GH_TOKEN="" \
     GH_RELEASE_DRAFT="false" \
     GH_RELEASE_PRERELEASE="false"

README.md

@@ -9,6 +9,8 @@ https://hub.docker.com/r/openswoolebundle/release-version-script
 ```sh
 docker-compose build --pull
 
+# either export vars to shell or use .env file
+export GH_COMMITER_SIGNING_KEY=xxxx
 export GH_TOKEN="xxxxx"
 export DRY_RUN="0"
 export DEBUG="1"

docker-compose.yml

@@ -13,6 +13,7 @@ services:
       GH_REPOSITORY: "${GH_REPOSITORY:-openswoole-bundle/release-version-script}"
       GH_COMMITER_NAME: "${GH_COMMITER_NAME:-openswoole-bundle-bot}"
       GH_COMMITER_EMAIL: "${GH_COMMITER_EMAIL:-147276322+openswoole-bundle-bot@users.noreply.github.com}"
+      GH_COMMITER_SIGNING_KEY: "${GH_COMMITER_SIGNING_KEY:-xxxx}"
       GH_TOKEN: "${GH_TOKEN:-xxxxxxxx}"
       GH_RELEASE_DRAFT: "${GH_RELEASE_DRAFT:-true}"
       GH_RELEASE_PRERELEASE: "${GH_RELEASE_PRERELEASE:-false}"

release-version.sh

@@ -25,12 +25,15 @@ fi
 # Set GH env variables
 GH_COMMITER_NAME="${GH_COMMITER_NAME:-openswoole-bundle-bot}"
 GH_COMMITER_EMAIL="${GH_COMMITER_EMAIL:-147276322+openswoole-bundle-bot@users.noreply.github.com}"
+GH_COMMITER_SIGNING_KEY="${GH_COMMITER_SIGNING_KEY:-xxxx}"
 GH_REPOSITORY="${GH_REPOSITORY:-openswoole-bundle/swoole-bundle}"
 GH_TOKEN="${GH_TOKEN:?"Provide \"GH_TOKEN\" variable with GitHub Personal Access Token"}"
 
 # Configure git
 git config user.name "${GH_COMMITER_NAME}"
 git config user.email "${GH_COMMITER_EMAIL}"
+git config user.signingkey "${GH_COMMITER_SIGNING_KEY}"
+git config commit.gpgsign true
 
 GIT_COMMIT_MESSAGE_FIRST_LINE="$(git show-branch --no-name HEAD)"
 GIT_COMMIT_MESSAGE_RELEASE_COMMIT_MATCHED="$(echo "$GIT_COMMIT_MESSAGE_FIRST_LINE" | sed -E 's/^chore\(release\)\: v([a-zA-Z0-9\.\-]+) \:tada\:/\1/')"
@@ -244,5 +247,9 @@ git push origin $PR_BASE
     fi
 done
 git remote remove authorized
+git config --unset user.name
+git config --unset user.email
+git config --unset user.signingkey
+git config --unset commit.gpgsign
 
 echo "Please approve and fast-forward merge release pull requests!"