Import a GPG Key
A GitHub Action to import a GPG private key into a runner's keychain for signing commits, tags, and pushes.
What is Import a GPG Key?
ghaction-import-gpg is a GitHub Action that imports a GPG private key into a workflow runner's keychain. It solves the problem of automating cryptographic signing for Git operations like commits and tags within CI/CD pipelines, ensuring that automated changes are verifiable and trusted.
Developers and DevOps engineers who use GitHub Actions and need to sign Git commits, tags, or pushes automatically in their workflows, particularly in security-sensitive or compliance-driven projects.
Developers choose this action because it provides a straightforward, cross-platform way to integrate GPG signing into GitHub Actions without manual setup, with features like subkey support, Git configuration, and cleanup to maintain security and workflow efficiency.
Overview
GitHub Action to import a GPG key
Use Cases
Best For
- Automatically signing commits in CI/CD pipelines
- Ensuring verified pushes to protected branches
Related Projects
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
