🔐 Security Alert: 1 Unsigned Commit(s) Detected

[github-actions]

🚨 Security Alert: Unsigned Commits Detected

Found 1 unsigned commit(s) that violate our GPG signing policy.

📋 Details

Commit 1:

• SHA: 2cf7c286f361cf2dac845d0612758909923e0be3
• Message: fix: packages/internal-tools/package.json to reduce vulnerabilities
• Author: snyk-bot snyk-bot@snyk.io
• Branch: 4/merge

🔧 Required Actions

1. Immediate: Do not merge until all commits are GPG signed
2. Setup GPG signing:

   git config user.name "iamdrewfortini"
   git config user.email "admin@diatonic.online"
   git config user.signingkey YOUR_GPG_KEY_ID
   git config commit.gpgsign true

3. Re-sign commits:

   git rebase --exec 'git commit --amend --no-edit -S' HEAD~1
   git push --force-with-lease

📋 Security Policy

This repository requires all commits to be GPG signed to ensure:

• Authenticity: Verify the commit author
• Integrity: Ensure commits haven't been tampered with
• Non-repudiation: Provide cryptographic proof of authorship

Required Configuration:

• User: iamdrewfortini
• Email: admin@diatonic.online
• GPG Key: Valid and trusted key

🔗 Related

• Triggered by: pull_request
• Workflow: 🔐 GPG Signature Verification
• Run: https://github.com/Diatonic-AI/wix-studio-azure-platform/actions/runs/21423577561