Skip to content
Snippets Groups Projects
Select Git revision
  • 35940f2ca861b5126b1203415b007159764c71ec
  • main default protected
  • revert-31645-feat/rename-gradle-wrapper-validation-action
  • next
  • renovate/main-redis-5.x
  • fix/36615b-branch-reuse-no-cache
  • chore/punycode
  • fix/36615-branch-reuse-bug
  • refactor/pin-new-value
  • feat/36219--git-x509-signing
  • feat/structured-logger
  • hotfix/39.264.1
  • feat/skip-dangling
  • gh-readonly-queue/next/pr-36034-7a061c4ca1024a19e2c295d773d9642625d1c2be
  • hotfix/39.238.3
  • refactor/gitlab-auto-approve
  • feat/template-strings
  • gh-readonly-queue/next/pr-35654-137d934242c784e0c45d4b957362214f0eade1d7
  • fix/32307-global-extends-merging
  • fix/32307-global-extends-repositories
  • gh-readonly-queue/next/pr-35009-046ebf7cb84ab859f7fefceb5fa53a54ce9736f8
  • 41.21.3
  • 41.21.2
  • 41.21.1
  • 41.21.0
  • 41.20.2
  • 41.20.1
  • 41.20.0
  • 41.19.0
  • 41.18.4
  • 41.18.3
  • 41.18.2
  • 41.18.1
  • 41.18.0
  • 41.17.2
  • 41.17.1
  • 41.17.0
  • 41.16.3
  • 41.16.2
  • 41.16.1
  • 41.16.0
41 results

private-key.ts

Blame
  • private-key.ts 1.41 KiB
    import os from 'os';
    import fs from 'fs-extra';
    import upath from 'upath';
    import { PLATFORM_GPG_FAILED } from '../../constants/error-messages';
    import { logger } from '../../logger';
    import { exec } from '../exec';
    
    let gitPrivateKey: string;
    let keyId: string;
    
    export function setPrivateKey(key: string): void {
      gitPrivateKey = key;
    }
    
    async function importKey(): Promise<void> {
      if (keyId) {
        return;
      }
      const keyFileName = upath.join(os.tmpdir() + '/git-private.key');
      await fs.outputFile(keyFileName, gitPrivateKey);
      const { stdout, stderr } = await exec(`gpg --import ${keyFileName}`);
      logger.debug({ stdout, stderr }, 'Private key import result');
      keyId = (stdout + stderr)
        .split('\n')
        .find((line) => line.includes('secret key imported'))
        .replace('gpg: key ', '')
        .split(':')
        .shift();
      await fs.remove(keyFileName);
    }
    
    export async function writePrivateKey(): Promise<void> {
      if (!gitPrivateKey) {
        return;
      }
      logger.debug('Setting git private key');
      try {
        await importKey();
      } catch (err) {
        logger.warn({ err }, 'Error writing git private key');
        throw new Error(PLATFORM_GPG_FAILED);
      }
    }
    
    export async function configSigningKey(cwd: string): Promise<void> {
      if (!gitPrivateKey) {
        return;
      }
      logger.debug('Configuring commits signing');
      await exec(`git config user.signingkey ${keyId}`, { cwd });
      await exec(`git config commit.gpgsign true`, { cwd });
    }