name: Commit Signatures
on:
push:
pull_request:
env:
CARGO_TERM_COLOR: always
permissions:
jobs:
signatures:
name: Assert all commits are PGP-signed
runs-on: ubuntu-latest
steps:
- name: Checkout code
uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
with:
persist-credentials: false
fetch-depth: 0
- name: Check commit signatures
run: bash contrib/check-signatures.sh