AAE-46943 Sign Crowdin translation PR commits with GPG (#11974)

* AAE-46943 Sign Crowdin translation PR commits with GPG

Add GPG signing and the service-account commit identity to the Crowdin
pull workflow so automated-translations-update commits satisfy the
"Require signed commits" branch protection rule.

* AAE-46943 Pass signing key secret through reusable Crowdin workflow

Declare SERVICE_ACCOUNT_SIGNING_KEY in workflow_call.secrets and pass it
from release.yml so commit signing also works when pull-from-crowdin is
invoked as a reusable workflow.
This commit is contained in:
Michaela
2026-06-11 11:55:13 +00:00
committed by GitHub
parent dd9e58ddaa
commit 49a28b357c
2 changed files with 6 additions and 0 deletions
+1
View File
@@ -173,6 +173,7 @@ jobs:
secrets:
BOT_GITHUB_TOKEN: ${{ secrets.BOT_GITHUB_TOKEN }}
CROWDIN_TRANSLATIONS_TOKEN: ${{ secrets.CROWDIN_TRANSLATIONS_TOKEN }}
HXP_GIT_COMMIT_SIGNING_PRIVATE_KEY: ${{ secrets.HXP_GIT_COMMIT_SIGNING_PRIVATE_KEY }}
finalize:
if: always()