Comments (2)
@jasonkarns LGTM, I think we would only need to add enable-ssh-support
to gpg-agent conf and maybe specify keys in gnupg sshcontrol but we would need to handle keygrips somehow. Last we have to tell SSH how to access the gpg-agent. Maybe use SSH_AUTH_SOCK
for that.
from ghaction-import-gpg.
I've realized later that this probably won't work for my primary use case...
My thought was to have a single gpg key for signing+auth which would be installed using this action. The signing key would be used to sign git commits, and the auth key would be used for authenticating with github for the push/pull.
However, there's a bit of a catch-22. This action must run after the checkout action, in order to support setting the gpg signing key. However, it would need to run before the checkout action if one wanted to provide the auth key to the checkout action via the ssh-key
parameter.
So while I still think there may be some utility here, my personal interest has waned a bit. Unless this feature were to "double up" on whatever the checkout action's ssh-key
param is doing (and thereby cut the catch-22 loop).
from ghaction-import-gpg.
Related Issues (20)
- No errors but can't sign commits HOT 5
- Set trust on private key import HOT 2
- Transient ERR 67108891 Not found <GPG Agent> HOT 5
- Error: Misformed armored text HOT 1
- Delete key fails when you use set a subkey for the fingerprint input HOT 2
- Premature key removal in cleanup due to concurrency HOT 3
- 67108933 Not implemented <GPG Agent> HOT 3
- No secret key when signing with goreleaser HOT 1
- Allow using any UID from a key
- Deprecated Node.js 12 actions (Update to Node.js 16) HOT 2
- Unable to export GPG key HOT 3
- Keygrip empty
- SSH Signing-Key Support? HOT 1
- Input required and not supplied: gpg_private_key HOT 2
- Error raised if '.gnupg/gpg-agent.conf' does not exist HOT 2
- openpgp is an outdated version that does not support ECC keys HOT 4
- Getting error `gpg: error reading key: No secret key` HOT 4
- Suggestion: pass or allow `--global` flag when configuring properties in `git config` HOT 2
- Post-cleanup GPG action generates a warning if the same key is imported twice HOT 1
- Support `if-asked` for `git-push-gpgsign` HOT 2
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from ghaction-import-gpg.