Skip to content

Revise PGP key export instructions to copy most recently created public key #378

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
chrisbloe wants to merge 1 commit into
base: main
Choose a base branch
from
Open

Revise PGP key export instructions to copy most recently created public key #378

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
14 changes: 7 additions & 7 deletions practices/guides/commit-signing.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -47,11 +47,11 @@ If you have already committed and need to retrospectively sign commits, follow t
1. Review your inputs and press enter `O` to confirm
1. Define a passphrase for the key

1. Test the key is visible and export the PGP public key (to your clipboard):
1. Test the key is visible, then export the [most recently generated] PGP public key (to your clipboard):

```bash
gpg -k # This should list the new key
gpg --armor --export <my_email_address> | pbcopy
gpg -k
gpg --armor --export $(gpg --list-secret-keys --with-colons | grep '^sec:' | tail -n 1 | cut -d: -f5) | pbcopy
```

> Your PGP public key is now in your clipboard!
Expand Down Expand Up @@ -110,11 +110,11 @@ If you have already committed and need to retrospectively sign commits, follow t
1. Review your inputs and press enter `O` to confirm
1. A new window called pinentry will appear prompting you to enter a passphrase.

1. Test the key is visible and export the PGP public key (to your clipboard):
1. Test the key is visible, then export the [most recently generated] PGP public key (to your clipboard):

```bash
gpg -k # This should list the new key
gpg --armor --export <my_email_address> | clip
gpg -k
gpg --armor --export $(gpg --list-secret-keys --with-colons | grep '^sec:' | tail -n 1 | cut -d: -f5) | clip
```

> Your PGP public key is now in your clipboard!
Expand Down Expand Up @@ -208,7 +208,7 @@ The workflow would then use a Personal Access Token, stored with the GPG private
```yaml
steps:
- name: Checkout
uses: actions/checkout@v5
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
with:
token: ${{ secrets.BOT_PAT }}
ref: main
Expand Down
Loading