ci: add Auths cryptographic commit verification (warn-only) #3

	name: Auths Commit Verification

	on:
	push:
	branches: [main]
	pull_request:
	branches: [main]

	concurrency:
	group: ${{ github.workflow }}-${{ github.event.pull_request.number \|\| github.ref }}
	cancel-in-progress: true

	permissions: {}

	jobs:
	verify:
	name: Verify commit signatures
	runs-on: ubuntu-latest
	timeout-minutes: 5
	permissions:
	contents: read
	pull-requests: write
	steps:
	- name: Checkout repository
	uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0
	with:
	fetch-depth: 0
	persist-credentials: false

	- name: Verify commits with Auths
	uses: auths-dev/auths-verify-github-action@57e304ef368d30474e5b6a04106cacde6a8ce492 # v1
	with:
	allowed-signers: .auths/allowed_signers
	fail-on-unsigned: 'false'
	skip-merge-commits: 'true'
	post-pr-comment: 'true'
	github-token: ${{ secrets.GITHUB_TOKEN }}

Navigation Menu