ci: sign lacework-releng commits

Signed-off-by: Salim Afiune Maya <afiune@lacework.net>
lacework · Jul 29, 2021 · 94af4f3 · 94af4f3
1 parent 1e8bae6
commit 94af4f3
Showing 1 changed file with 8 additions and 4 deletions.
diff --git a/scripts/release_helpers.sh b/scripts/release_helpers.sh
@@ -71,10 +71,13 @@ bump_version() {
   fi
 
   log "commiting and pushing the version bump to github"
-  git config --global user.email $git_email
-  git config --global user.name $git_user
+  if [ "$CI" != "" ]; then
+    git config --global user.email $git_email
+    git config --global user.name $git_user
+    git config --global user.signingkey $GPG_SIGNING_KEY
+  fi
   git_add_version_files
-  git commit -m "chore: version bump to v$VERSION"
+  git commit -sS -m "ci: version bump to v$VERSION"
   git push origin $main_branch
 }
 
@@ -146,9 +149,10 @@ push_release() {
   if [ "$CI" != "" ]; then
     git config --global user.email $git_email
     git config --global user.name $git_user
+    git config --global user.signingkey $GPG_SIGNING_KEY
   fi
   git checkout -B release
-  git commit -am "release: v$_version_no_tag"
+  git commit -sS -am "release: v$_version_no_tag"
   git push origin release -f
 }