check-verified-commit.yml

name: Check signed commits in PR
on: [pull_request,pull_request_target]
jobs:
  check-signed-commits:
    name: Check signed commits in PR
    runs-on: ubuntu-latest
    permissions:
      contents: read
      pull-requests: write
    steps:
      - name: Information about how to sign commits see https://docs.github.com/en/authentication/managing-commit-signature-verification/signing-commits
        # "with comment" below does not work for forks.
        run: |
          echo "If you need to sign commits, Please see https://docs.github.com/en/authentication/managing-commit-signature-verification/signing-commits"
      - name: Check signed commits in PR on fail see above information.
        uses: 1Password/check-signed-commits-action@v1
        with:
          comment: |
            Thank you for your contribution, but we need you to sign your commits. Please see https://docs.github.com/en/authentication/managing-commit-signature-verification/signing-commits