From d7369b4c955565581b0859544137c7618b1772ae Mon Sep 17 00:00:00 2001
From: Michaela <85624192+mkrbr@users.noreply.github.com>
Date: Thu, 11 Jun 2026 13:49:18 +0200
Subject: [PATCH] [AAE-46943] Sign Crowdin translation PR commits with GPG
 (#5222)

Add GPG signing and the service-account commit identity to the Crowdin
pull workflow so automated-translations-update commits satisfy the
"Require signed commits" branch protection rule.
---
 .github/workflows/pull-from-crowdin.yml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/.github/workflows/pull-from-crowdin.yml b/.github/workflows/pull-from-crowdin.yml
index 85921f08d..1133adcd4 100644
--- a/.github/workflows/pull-from-crowdin.yml
+++ b/.github/workflows/pull-from-crowdin.yml
@@ -18,6 +18,9 @@ jobs:
           localization_branch_name: automated-translations-update
           pull_request_title: "GH Auto: Automated Update of Translations from Crowdin"
           pull_request_base_branch_name: develop
+          github_user_name: ${{ vars.HXP_GIT_USERNAME }}
+          github_user_email: ${{ vars.HXP_GIT_EMAIL }}
+          gpg_private_key: ${{ secrets.HXP_GIT_COMMIT_SIGNING_PRIVATE_KEY }}
         env:
           GITHUB_TOKEN: ${{ secrets.BOT_GITHUB_TOKEN }}
           CROWDIN_TOKEN: ${{ secrets.CROWDIN_TRANSLATIONS_TOKEN }}