chore(deps-dev): bump @types/node from 20.14.6 to 22.4.1 #28
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # SPDX-License-Identifier: Apache-2.0 | |
| # This GitHub Actions workflow checks that all commits in a pull request (PR) have been verified with GPG signatures. | |
| name: GPG Verify | |
| on: [pull_request] # Trigger this workflow on pull request events | |
| jobs: | |
| gpg-verify: | |
| runs-on: ubuntu-latest # Use the latest Ubuntu runner for the job | |
| steps: | |
| - uses: actions/checkout@v4 # Checkout the repository code using the actions/checkout action | |
| with: | |
| fetch-depth: 0 # Fetch all history for all branches to ensure we have the full commit history | |
| - name: Check GPG verification status # Step to check each commit for GPG signature verification | |
| run: | | |
| # Get the list of commits in the pull request | |
| commits=$(git log --pretty=format:%H origin/${{ github.event.pull_request.head.ref }}..origin/${{ github.event.pull_request.base.ref }}) | |
| # Check the GPG verification status of each commit | |
| for commit in $commits; do | |
| status=$(curl -s -H "Authorization: token ${{ secrets.GITHUB_TOKEN }}" \ | |
| https://api.github.com/repos/${{ github.repository }}/commits/$commit/check-runs \ | |
| | jq -r '.check_runs[] | select(.name == "GPG verify") | .conclusion') | |
| # If the GPG verification status is not successful, list the commit and exit with a non-zero status | |
| if [[ "$status" != "success" ]]; then | |
| echo "GPG signature verification failed for commit $commit." | |
| exit 1 | |
| fi | |
| done |