1  name: Verify Commit Signatures
 2  
 3  on:
 4    pull_request:
 5      branches: [main, master]
 6  
 7  jobs:
 8    verify:
 9      runs-on: ubuntu-latest
10      steps:
11        - name: Checkout repository
12          uses: actions/checkout@v4
13          with:
14            fetch-depth: 0
15  
16        - name: Verify commit signatures
17          uses: auths-dev/auths-verify-action@v1
18          with:
19            allowed-signers: '.auths/allowed_signers'
20            fail-on-unsigned: 'true'
21            skip-merge-commits: 'true'