🔐 Security Alert: 1 Unsigned Commit(s) Detected

[github-actions]

🚨 Security Alert: Unsigned Commits Detected

Found 1 unsigned commit(s) that violate our GPG signing policy.

📋 Details

Commit 1:

• SHA: HEAD
• Message: test: verify GPG signature workflow functionality
• Author: iamdrewfortini admin@diatonic.online
• Branch: main

🔧 Required Actions

1. Immediate: Do not merge until all commits are GPG signed
2. Setup GPG signing:

   git config user.name "iamdrewfortini"
   git config user.email "admin@diatonic.online"
   git config user.signingkey YOUR_GPG_KEY_ID
   git config commit.gpgsign true

3. Re-sign commits:

   git rebase --exec 'git commit --amend --no-edit -S' HEAD~1
   git push --force-with-lease

📋 Security Policy

This repository requires all commits to be GPG signed to ensure:

• Authenticity: Verify the commit author
• Integrity: Ensure commits haven't been tampered with
• Non-repudiation: Provide cryptographic proof of authorship

Required Configuration:

• User: iamdrewfortini
• Email: admin@diatonic.online
• GPG Key: Valid and trusted key

🔗 Related

• Triggered by: push
• Workflow: 🔐 GPG Signature Verification
• Run: https://github.com/Diatonic-AI/wix-studio-azure-platform/actions/runs/16096694136