Skip to content

Fix trusted keys length #102

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
vimal-java-dev merged 2 commits into from
Jul 15, 2026
Merged

Fix trusted keys length #102

Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
a6c2365
github action workflow updated
vimal-java-dev Jul 14, 2026
606e4a5
Fix: Update TRUSTED_KEYS with full 40-character fingerprint
vimal-java-dev Jul 15, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
12 changes: 10 additions & 2 deletions .github/workflows/doc-check-linter.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -62,8 +62,15 @@ jobs:
echo "✅ Imported GPG_PUBLIC_KEY_1"
fi

if [ -n "${{ secrets.GPG_PUBLIC_KEY_2 }}" ]; then
echo "${{ secrets.GPG_PUBLIC_KEY_2 }}" | gpg --import
echo "✅ Imported GPG_PUBLIC_KEY_2 (Contributor Account)"
fi

# ---------- Verify latest commit ----------
- name: Verify commit signature
# FIX: Only run strict verification if the PR is from the same repo (internal/trusted) or if it's a direct push
if: ${{ github.event.pull_request.head.repo.full_name == github.repository || github.event_name != 'pull_request' }}
run: |
if [ "${{ github.event_name }}" = "pull_request" ]; then
echo "🔍 PR mode: verifying ALL commits in PR"
Expand All @@ -89,7 +96,8 @@ jobs:
FINGERPRINT=$(git log -1 --pretty=format:'%GF' "$COMMIT")
echo "🔑 Fingerprint: $FINGERPRINT"

TRUSTED_KEYS="83FB991D930D7177F25456C07F4C7CA953E1C09E D432152833DA3244"
# Replaced the short ID with the full 40-character fingerprint
TRUSTED_KEYS="83FB991D930D7177F25456C07F4C7CA953E1C09E 5CC01F41CD084AAC0593108DD432152833DA3244 A38379B51EB75EF1877A83ADBE677DAEFE33CB57"

if echo "$TRUSTED_KEYS" | grep -q "$FINGERPRINT"; then
echo "✅ Trusted key"
Expand All @@ -100,7 +108,7 @@ jobs:
done

echo "🎉 All PR commits are valid and trusted"

else
echo "🔍 Push to main detected"
echo "ℹ️ Skipping strict GPG verification for merge/rebase/squash commit"
Expand Down
Loading