From: Evan You <evan@vuejs.org>
Date: Tue, 6 Aug 2024 14:57:52 +0000 (+0800)
Subject: workflow: sign the release commit in workflow
X-Git-Tag: v3.4.37~23
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=7c75cc3988e5e7bd7eeb002bfeb561a0e2ce28e8;p=thirdparty%2Fvuejs%2Fcore.git

workflow: sign the release commit in workflow
---

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 823bbcd454..fcf0c3fac5 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -62,6 +62,14 @@ jobs:
           git config user.name "vue-bot"
           git config user.email "<bot@vuejs.org>"
 
+      - name: Import GPG key
+        uses: crazy-max/ghaction-import-gpg@v6
+        with:
+          gpg_private_key: ${{ secrets.GPG_PRIVATE_KEY }}
+          passphrase: ${{ secrets.GPG_PASSPHRASE }}
+          git_user_signingkey: true
+          git_commit_gpgsign: true
+
       - name: Run release script
         id: release
         run: |