Peter Evans

comment 30

[lua-cjson on luarocks](https://luarocks.org/modules/openresty/lua-cjson) seems to be Openresty's version, not this code base. See this issue there: https://github.com/openresty/lua-cjson/issues/36

Hi @andridzi Please could you explain in more detail about what you are trying and what does/doesn't work. > It will be signed only when committer and author fields not...

@andridzi I'm not sure how to approach this problem because this action does not use the API you mentioned. Commits are made locally in the GitHub Actions run using the...

> Signature verification for bots will only work if the request is verified and authenticated as the GitHub App or bot and contains no custom author information, custom committer information,...

I've documented how you can do it with GPG here: https://github.com/peter-evans/create-pull-request/blob/main/docs/concepts-guidelines.md#gpg-commit-signature-verification Not sure if something like this can work with tokens generated from a GitHub auth app, though.

Hi @dhruvCW I saw that blog post, too. Thank you for testing it! I've not had chance to test it myself yet, but my guess is that there are still...

@villelahdenvuo I don't recommend using the `retry` branch of this action. It's very old now and has missed some important updates. If you are hitting the rate limit then there...

@paulz Using a PAT doesn't stop you from being rate-limited. I think GitHub are just more generous with the limits for authenticated user accounts. If you have used the same...

@umanghome Thank you for contributing this. Apologies for not looking at it sooner. This issue comes up occasionally for a few of the actions I maintain. I was really trying...