./github/workflows/signed.yaml: Create CI for checking signed commits (…

…#11)

Signed-off-by: Devansh3712 <[email protected]>
Reviewed-by: Kamoltat <[email protected]>

.github/workflows/signed.yaml

@@ -0,0 +1,15 @@
+name: Signed Commit CI
+
+on: [push, pull_request]
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v3
+      - name: Check for commit trailers
+        run: |
+          chmod +x ./signed.sh
+          ./signed.sh
+        shell: bash
+        working-directory: ./gh-actions

gh-actions/signed.sh

@@ -0,0 +1,7 @@
+#!/bin/bash
+set -e
+trailer=$(git log -1 --no-merges $commit --pretty='%B' | git interpret-trailers --parse 2>&1)
+if [[ $trailer != Signed-off-by:* ]]; then
+    printf '%s\n' "Commit is not signed, use git commit --amend --signoff" >&2
+    exit 1
+fi