Signed commit - verified/unverified/none conditions

[ghost]

👋🏻

Would it be possible to add conditions to assess the verification status of the commits in a PR?

https://docs.github.com/en/authentication/managing-commit-signature-verification/about-commit-signature-verification

I am investigating the use case to warn and possible reject PRs where a commit is Partially verified or Unverified but continue if No verification status.

[jd]

Yes, that sounds possible. GitHub exposes the verification status as part of the commits API.

IIUC your use case, you would add something like #commits-unverified=0 and #commits-partially-verified=0 to your merge conditions?

[ghost]

Yeah something like that. We'd probably do something like #commits-unverified>0 and add some error/warning comments in the short term but, principle is the same 🤓

[jd]

Understood. We've added this on our roadmap. 😉