chore: configure lerna to sign commits and tags with GPG

Author: jremy42

.github/workflows/deploy-package.yml

@@ -20,6 +20,17 @@ jobs:
           persist-credentials: false
           token: ${{ secrets.GH_TOKEN }}
       - run: git fetch --depth=1 origin +refs/tags/*:refs/tags/*
+
+      - name: Import GPG key
+        run: |
+          echo "${{ secrets.GPG_PRIVATE_KEY }}" | gpg --batch --import
+          GPG_KEY_ID=$(gpg --list-secret-keys --keyid-format=long | grep sec | head -n1 | awk '{print $2}' | cut -d'/' -f2)
+          git config --global user.signingkey "$GPG_KEY_ID"
+          git config --global commit.gpgsign true
+          git config --global tag.gpgsign true
+        env:
+          GPG_TTY: $(tty)
+
       - name: Git Identity
         run: |
           git config --global user.name 'scaleway-bot'

lerna.json

@@ -7,7 +7,9 @@
       "conventionalCommits": true,
       "message": "chore(release): publish",
       "createRelease": "github",
-      "loglevel": "verbose"
+      "loglevel": "verbose",
+      "signGitCommit": true,
+      "signGitTag": true
     }
   },
   "$schema": "node_modules/lerna/schemas/lerna-schema.json"