ci: gitlab: sign the commit

earth-system-radiation · Jan 14, 2025 · 25046d7 · 25046d7
1 parent b638427
commit 25046d7
Showing 1 changed file with 5 additions and 3 deletions.
diff --git a/.github/workflows/gitlab-ci.yml b/.github/workflows/gitlab-ci.yml
@@ -39,8 +39,10 @@ jobs:
         with:
           remote-url: ${{ vars.DKRZ_GITLAB_SERVER }}/${{ vars.DKRZ_GITLAB_PROJECT }}.git
           password: ${{ secrets.DKRZ_GITLAB_TOKEN }}
-          ref-type: tag
-          ref-message: ${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}
+          rev-id: ${{ github.sha }}
+          rev-signing-format: ssh
+          rev-signing-key: ${{ secrets.GITLAB_SIGNING_KEY }}
+          ref-type: branch
           force-push: true
       - name: Trigger GitLab CI/CD Pipeline
         id: gl-trigger-pipeline
@@ -50,7 +52,7 @@ jobs:
           project-name: ${{ vars.DKRZ_GITLAB_PROJECT }}
           token: ${{ secrets.DKRZ_GITLAB_TRIGGER_TOKEN }}
           ref-name: ${{ steps.g-push-rev.outputs.ref-name }}
-          expected-sha: ${{ github.sha }}
+          expected-sha: ${{ steps.g-push-rev.outputs.ref-commit }}
   attach:
     runs-on: ubuntu-latest
     needs: trigger