remove pgp signing and add label

liquidmetal-dev · Mar 4, 2023 · 3a26568 · 3a26568
1 parent 7f69d37
commit 3a26568
Showing 1 changed file with 5 additions and 8 deletions.
diff --git a/.github/workflows/dependabot_bundler.yml b/.github/workflows/dependabot_bundler.yml
@@ -2,6 +2,9 @@ name: bundlebot
 
 on:
   workflow_dispatch: {}
+  push:
+    branches: # TODO remove
+      - bundler-github-action
   schedule:
     - cron: 0 0 * * 1 # every Monday at 00:00
 
@@ -36,11 +39,5 @@ jobs:
             --token ${{ secrets.GITHUB_TOKEN }} \
             --owner weaveworks-liquidmetal \
             --repo flintlock \
-            --signing-public-key "${{ secrets.DEPENDABOT_BUNDLER_GPG_PUBLIC_KEY }}" \
-            --signing-private-key "${{ secrets.DEPENDABOT_BUNDLER_GPG_PRIVATE_KEY }}" \
-            --signing-key-passphrase "${{ secrets.DEPENDABOT_BUNDLER_GPG_PASSPHRASE }}" \
-            --signing-name dependabot-bundler \
-            --signing-email 126970507+dependabot-bundler@users.noreply.github.com \
-            --author-name dependabot-bundler \
-            --author-email 126970507+dependabot-bundler@users.noreply.github.com \
-            --labels 'area/dependency,kind/cleanup'
+            --labels 'area/dependency,kind/cleanup,user-signing-required' \
+            --pr-title 'chore(deps): Bundle dependabot pull requests'