k8s-set-context/.github/workflows/check-signed-commits.yml at 6e4f54aa5d1d415c0ef506b1b36e37d0dc996da1 - k8s-set-context - Gitea RS

azure/k8s-set-context

mirror of https://github.com/Azure/k8s-set-context.git synced 2026-10-14 06:19:56 +08:00

Files

T

David Gamero 6e4f54aa5d chore: enforce 7-day dependency freshness period and check signed commits (#277 )

Adopts the dependency bake period standardized in aks-set-context #258,
k8s-lint #228 and k8s-bake #295: newly published packages are not picked
up until they have been available for at least 7 days.

- dependabot: 7-day cooldown, scheduled on the 1st and 15th via cron,
  with minor/patch grouped into one PR so majors still get individual
  review.
- .npmrc: min-release-age=7 applies the same rule to local installs.
- adds the shared check_signed_commits reusable workflow.

Matches k8s-bake and deliberately omits the engines/engine-strict npm
guard used by the two earlier repos. Node 24 (this action's runtime)
bundles npm 11.17, so the gate would only fire for contributors already
off the target runtime, and dependabot's cooldown enforces the bake
server-side regardless of anyone's local npm.

2026-08-13 10:59:27 -07:00

13 lines

251 B

YAML

Raw Blame History

 name: Check Signed Commits
 on:
    pull_request:
 permissions:
    contents: read
    pull-requests: write
 jobs:
    signed:
       uses: Azure/action-release-workflows/.github/workflows/check_signed_commits.yaml@2ff084415c5af591fd13d95ddbfc4cdb5ed2012e