From 535cf53847d849fea021b6cb0611830e9f35d93d Mon Sep 17 00:00:00 2001 From: Samuel K Date: Mon, 7 Sep 2026 20:12:16 +0000 Subject: [PATCH] chore: configure git allowed_signers in agent setup Updates the `setup:agent` task in `mise.agent.toml` to configure `gpg.ssh.allowedSignersFile` by creating `~/.ssh/allowed_signers` and appending the agent's signing public key along with the configured author email. This allows git to verify the ssh signatures of commits made within the agent environment without encountering missing file errors. --- mise.agent.toml | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/mise.agent.toml b/mise.agent.toml index 6ce1b9430..e0d85186c 100644 --- a/mise.agent.toml +++ b/mise.agent.toml @@ -34,4 +34,10 @@ git config --global commit.gpgsign true git config --global tag.gpgsign true git config --global user.name "$DEVSY_GIT_AUTHOR_NAME" git config --global user.email "$DEVSY_GIT_AUTHOR_EMAIL" + +mkdir -p "$HOME/.ssh" +chmod 700 "$HOME/.ssh" +echo "$DEVSY_GIT_AUTHOR_EMAIL $(cat $SIGNING_PUBLIC_KEY)" > "$HOME/.ssh/allowed_signers" +chmod 600 "$HOME/.ssh/allowed_signers" +git config --global gpg.ssh.allowedSignersFile "$HOME/.ssh/allowed_signers" '''