From eaa836b00902b8d075ee54842555601de403078c Mon Sep 17 00:00:00 2001
From: Evgeniy Frolov <evgeniy.frolov@flant.com>
Date: Mon, 24 Mar 2025 15:11:51 +0300
Subject: [PATCH] chore(taskfile): add ability to sign versions

Signed-off-by: Evgeniy Frolov <evgeniy.frolov@flant.com>
---
 Taskfile.dist.yaml | 13 +++++++++++++
 1 file changed, 13 insertions(+)

diff --git a/Taskfile.dist.yaml b/Taskfile.dist.yaml
index 52b9819..927accb 100644
--- a/Taskfile.dist.yaml
+++ b/Taskfile.dist.yaml
@@ -6,6 +6,19 @@ vars:
   version: '{{.version | default "dev"}}'
 
 tasks:
+  sign:
+    desc: 'Sign last version tag + origin/main and push signatures. Important vars: "refs".'
+    cmds:
+      - git fetch --tags -f
+      - git signatures pull {{.CLI_ARGS}}
+      - |
+        for ref in {{.refs | default "$(git tag --sort=v:refname | tail -n1) origin/main"}}; do
+          echo Signing $ref...
+          git signatures add {{.CLI_ARGS}} $ref
+          git signatures show {{.CLI_ARGS}} $ref
+        done
+      - git signatures push {{.CLI_ARGS}}
+
   deps:install:
     desc: "Install all dependencies."
     deps: