-
Couldn't load subscription status.
- Fork 88
fix: gh pages sync #3857
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
fix: gh pages sync #3857
Conversation
Signed-off-by: Roger Barker <[email protected]>
Signed-off-by: Roger Barker <[email protected]>
🎉 Snyk checks have passed. No issues have been found so far.✅ security/snyk check is complete. No issues have been found. (View Details) ✅ license/snyk check is complete. No issues have been found. (View Details) |
Test Results 20 files - 1 256 suites - 25 18m 13s ⏱️ -3s Results for commit f08d44e. ± Comparison against base commit 8c7fbc9. This pull request removes 1 test.♻️ This comment has been updated with latest results. |
Signed-off-by: Roger Barker <[email protected]>
Signed-off-by: Roger Barker <[email protected]>
Signed-off-by: Roger Barker <[email protected]>
Description:
This pull request updates GitHub Actions workflows to enhance security and improve configuration consistency. Key changes include modifying permissions, adding GPG key import steps, and ensuring proper configuration for GPG signing.
Workflow Permissions and Security Enhancements:
.github/workflows/gh-pages-sync.yaml: Changedcontentspermission fromwritetoreadfor improved security.GPG Signing and Configuration Updates:
.github/workflows/gh-pages-sync.yaml: Added a step to import a GPG key for signing commits and tags, using thestep-security/ghaction-import-gpgaction. Configured the GPG signing process with environment variables and secrets for user details and passphrase..github/workflows/release-automation.yml: Updated the GPG signing step to includegit_committer_emailandgit_committer_namefor consistency with thegh-pages-syncworkflow.Related issue(s):
Fixes #3856
Testing: