fixup

Author: mattiaswal

.github/workflows/check-kernel-release.yml

@@ -63,12 +63,21 @@ jobs:
           echo "name=$BRANCH_NAME" >> $GITHUB_OUTPUT
           echo "Branch name: $BRANCH_NAME"
 
+      - name: Import GPG key
+        if: steps.check.outputs.new_release == 'true'
+        run: |
+          echo "${{ secrets.AEL_BOT_GPG_PRIVATE_KEY }}" | gpg --batch --import
+          echo "${{ secrets.AEL_BOT_GPG_PASSPHRASE }}" | gpg --batch --yes --passphrase-fd 0 --pinentry-mode loopback --quick-add-key $(gpg --list-secret-keys --with-colons | grep '^sec' | cut -d':' -f5) || true
+
       - name: Set up git credentials
         if: steps.check.outputs.new_release == 'true'
         run: |
           set -e -o pipefail
           git config --global user.email "[email protected]"
           git config --global user.name "ael-bot"
+          git config --global commit.gpgsign true
+          git config --global user.signingkey $(gpg --list-secret-keys --keyid-format=long | grep '^sec' | head -1 | awk '{print $2}' | cut -d'/' -f2)
+          git config --global gpg.program gpg
 
           # Configure git to use the token for HTTPS operations
           git config --global url."https://ael-bot:${{ secrets.KERNEL_UPDATE_TOKEN }}@github.com/".insteadOf "[email protected]:"