ci: sign lacework-releng commits (#4)

Signed-off-by: Salim Afiune Maya <afiune@lacework.net>
lacework · Jul 30, 2021 · 7a5d2bd · 7a5d2bd
1 parent bf6cdf6
commit 7a5d2bd
Show file tree

Hide file tree

Showing 2 changed files with 9 additions and 5 deletions.
diff --git a/scripts/release.sh b/scripts/release.sh
@@ -15,7 +15,7 @@ source scripts/release_helpers.sh
 readonly org_name=lacework
 readonly project_name=terraform-<PROVIDER>-<NAME>
 readonly git_user="Lacework Inc."
-readonly git_email="ops+releng@lacework.net"
+readonly git_email="tech-ally@lacework.net"
 readonly required_files_for_release=(
   RELEASE_NOTES.md
   CHANGELOG.md

diff --git a/scripts/release_helpers.sh b/scripts/release_helpers.sh
@@ -71,10 +71,13 @@ bump_version() {
   fi
 
   log "commiting and pushing the version bump to github"
-  git config --global user.email $git_email
-  git config --global user.name $git_user
+  if [ "$CI" != "" ]; then
+    git config --global user.email $git_email
+    git config --global user.name $git_user
+    git config --global user.signingkey $GPG_SIGNING_KEY
+  fi
   git_add_version_files
-  git commit -m "chore: version bump to v$VERSION"
+  git commit -sS -m "ci: version bump to v$VERSION"
   git push origin $main_branch
 }
 
@@ -146,9 +149,10 @@ push_release() {
   if [ "$CI" != "" ]; then
     git config --global user.email $git_email
     git config --global user.name $git_user
+    git config --global user.signingkey $GPG_SIGNING_KEY
   fi
   git checkout -B release
-  git commit -am "release: v$_version_no_tag"
+  git commit -sS -am "release: v$_version_no_tag"
   git push origin release -f
 }