action-setup icon indicating copy to clipboard operation
action-setup copied to clipboard
verified publisher icon reviewdog

feat: Add GitHub Actions workflow permissions and signed commits

Open haya14busa opened this issue 9 months ago • 0 comments

Summary

  • Added required permissions for the depup workflow (id-token, pull-requests, contents)
  • Integrated Chainguard's setup-gitsign action to enable keyless Git commit signing for automated PRs

Test plan

  • Verify the depup workflow runs correctly with the new permissions
  • Check that commits from the workflow are properly signed with Gitsign

🤖 Generated with Claude Code

haya14busa avatar Mar 27 '25 08:03 haya14busa