GV

GeezerVison

The World Wide Web, restored to 800 pixels of glory.

Home|About|Gaming cabinet|Archives|How it works|Starter sites

On this site

  • Sign in
  • ActionsCI/CD and automation
  • CodespacesCloud development environments
  • All Features
  • Documentation
  • Training
  • Certifications
  • Build with Copilot
  • Customize Copilot
  • Integrations
  • Trending repos
  • GitHub Sponsors
  • Developer articles
  • Enterprises

This view

  • Original page
  • New address

GeezerVison is showing github.com — GitHub - ryancyq/github-signed-commit: 🖋️ Create a signed commit with GitHub Actions.

Use this GitHub action with your project
Add this Action to an existing workflow or create a new one
View on Marketplace
BranchesTags
Open more actions menu

Latest commit

 

History

358 Commits
358 Commits

Folders and files

NameName
Last commit message
Last commit date
.github
.github
 
 
__tests__
__tests__
 
 
dist
dist
 
 
src
src
 
 
.codeclimate.json
.codeclimate.json
 
 
.gitignore
.gitignore
 
 
.node-version
.node-version
 
 
.prettierignore
.prettierignore
 
 
CHANGELOG.md
CHANGELOG.md
 
 
LICENSE
LICENSE
 
 
README.md
README.md
 
 
action.yml
action.yml
 
 
cliff.toml
cliff.toml
 
 
eslint.config.js
eslint.config.js
 
 
package-lock.json
package-lock.json
 
 
package.json
package.json
 
 
tsconfig.json
tsconfig.json
 
 
vitest.config.ts
vitest.config.ts
 
 

Repository files navigation

🖋️ Create signed commits with GitHub Actions

CI Coverage Maintainability

Learn more about commit signature on GitHub.

Features

Works with the GitHub GraphQL API.

  • Uses the Git CLI to detect file changes against the file paths provided in the input.
  • Uses a single GraphQL mutation request to upload all blob file content.
  • Supports glob patterns for file paths.
  • Push tag to the new/current commit on a branch.

Known Limitation

Does not support HTTP request streaming, so the action runner will consume more memory during execution when uploading large blob files.

Usage

In your workflow, to commit your files, configure a step as follows:

jobs:
  <job-id>:
    permissions:
      contents: write # grant secrets.GITHUB_TOKEN permission to push file changes
  
    - name: Commit file
      uses: ryancyq/github-signed-commit@v1
      env:
        GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
      with:
        files: |
          path/to/myfile1
          path/to/*.md
          path/to/**/*.js
        commit-message: Committing files
jobs:
  <job-id>:
    permissions:
      contents: write # grant secrets.GITHUB_TOKEN permission to push file changes
  
    - name: Commit file
      uses: ryancyq/github-signed-commit@v1
      env:
        GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
      with:
        files: path/to/myversion
        commit-message: Release new version
        tag: v1.0.3

Note: The GH_TOKEN environment variable is required for GitHub API request authentication.

Inputs

Input Required Description
files YES Multi-line string of file paths to be committed, relative to the current workspace.
workspace NO Directory containing files to be committed. DEFAULT: GitHub workspace directory (root of the repository).
commit-message YES Commit message for the file changes.
repository NO Repository name including owner (e.g. owner/repo). DEFAULT: Workflow triggered repository
branch-name NO Branch to commit, it must already exist in the remote. DEFAULT: Workflow triggered branch
branch-push-force NO --force flag when running git push <branch-name>.
tag NO Push tag for the new/current commit.
tag-only-if-file-changes NO Push tag for new commit only when file changes present. DEFAULT: true

Outputs

Output Description
commit-sha Full SHA of the signed commit.
tag Tag of the signed commit.

About

🖋️ Create a signed commit with GitHub Actions.

Topics

commit-messagecommitscontinous-integrationgitgithubgithub-actionsgpg-signaturesigned-commitstaggingtagsverified-commits

Resources

Readme
MIT license
Activity

Stars

2 stars

Watchers

1 watching

Forks

2 forks
Report repository

Releases

Used by

Contributors

Languages

You are visitor 01402503 — GeezerVison does not store the pages you look up.
Best viewed with Netscape Navigator 4.7 or Internet Explorer 6 at 800×600. No cookies required.