feat: Sign commits with GPG (#174)

Author: raulb

.github/workflows/release.yml

@@ -20,11 +20,19 @@ jobs:
         uses: actions/setup-go@v2
         with:
           go-version: 1.16.x
+      -
+        name: Import GPG key
+        id: import_gpg
+        uses: crazy-max/[email protected]
+        with:
+          gpg-private-key: ${{ secrets.MEROXA_MACHINE_GPG_KEY }}
+          passphrase: ${{ secrets.MEROXA_MACHINE_GPG_PASSPHRASE }}
       -
         name: Run GoReleaser
         uses: goreleaser/goreleaser-action@v1
         with:
           version: latest
           args: release --rm-dist
         env:
+          GPG_FINGERPRINT: ${{ steps.import_gpg.outputs.fingerprint }}
           GITHUB_TOKEN: ${{ secrets.MEROXA_MACHINE }}