Skip to content

chore: configure git allowed_signers in agent setup - #1195

Merged
skevetter merged 1 commit into
mainfrom
configure-mise-agent-toml-gpg-ssh-allowedsignersfile
Sep 7, 2026
Merged

skevetter merged 1 commit into
mainfrom
configure-mise-agent-toml-gpg-ssh-allowedsignersfile

Conversation

@skevetter

Copy link
Copy Markdown
Contributor

Configures the SSH allowed_signers file in mise.agent.toml so that git log --show-signature and git verification tools can verify SSH-signed commits made within the agent environment without encountering missing file errors (gpg.ssh.allowedSignersFile).

Changes

  • Updated the setup:agent task in mise.agent.toml:
    • Creates ~/.ssh with permissions 700.
    • Writes $DEVSY_GIT_AUTHOR_EMAIL $(cat $SIGNING_PUBLIC_KEY) to ~/.ssh/allowed_signers with permissions 600.
    • Configures gpg.ssh.allowedSignersFile globally to $HOME/.ssh/allowed_signers.

Updates the `setup:agent` task in `mise.agent.toml` to configure `gpg.ssh.allowedSignersFile` by creating `~/.ssh/allowed_signers` and appending the agent's signing public key along with the configured author email. This allows git to verify the ssh signatures of commits made within the agent environment without encountering missing file errors.
@netlify

netlify Bot commented Sep 7, 2026 •

Copy link
Copy Markdown

✅ Deploy Preview for devsydev canceled.

Name Link
🔨 Latest commit 535cf53
🔍 Latest deploy log https://app.netlify.com/projects/devsydev/deploys/6a9f1ab981fbb9000806e8e9

@coderabbitai

coderabbitai Bot commented Sep 7, 2026 •

Copy link
Copy Markdown

Warning

Review limit reached

Next included review available in 28 minutes.

Check out review usage here.

View limit details

Limit details: You’ve used the included review currently available.

You've used all free OSS reviews for now. Wait for the free limit to reset to keep reviewing this public repository.

Learn how review limits work.

Review configuration:

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Team

Run ID: 6dd6b9de-26f4-409e-939d-7d454285cb66

📥 Commits

Reviewing files that changed from the base of the PR and between 977ed53 and 535cf53.

📒 Files selected for processing (1)
  • mise.agent.toml

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@netlify

netlify Bot commented Sep 7, 2026 •

Copy link
Copy Markdown

✅ Deploy Preview for images-devsy-sh canceled.

Name Link
🔨 Latest commit 535cf53
🔍 Latest deploy log https://app.netlify.com/projects/images-devsy-sh/deploys/6a9f1ab92c46640008942d43

@skevetter
skevetter marked this pull request as ready for review September 7, 2026 20:21
@mergify

mergify Bot commented Sep 7, 2026

Copy link
Copy Markdown

Tick the box to add this pull request to the merge queue (same as @mergifyio queue).

  • Queue this pull request

@skevetter
skevetter merged commit 0a28fb2 into main Sep 7, 2026
29 checks passed
@skevetter
skevetter deleted the configure-mise-agent-toml-gpg-ssh-allowedsignersfile branch September 7, 2026 20:31
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant