From 0665b1bd3b4e4424059dd6230d3014c3b6b144b4 Mon Sep 17 00:00:00 2001
From: Gavin Nishizawa <gavin@terrastruct.com>
Date: Thu, 5 Oct 2023 17:58:57 -0700
Subject: [PATCH] workflow check for commit signatures

---
 .github/workflows/ci.yml | 9 +++++++++
 ci/sub                   | 2 +-
 2 files changed, 10 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 27141cd95..03252b0cd 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -31,3 +31,12 @@ jobs:
         env:
           GITHUB_TOKEN: ${{ secrets._GITHUB_TOKEN }}
           DISCORD_WEBHOOK_URL: ${{ secrets.DISCORD_WEBHOOK_URL }}
+  signed:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v3
+      - run: git submodule update --init
+      - run: COLOR=1 ./ci/sub/bin/ensure_signed.sh
+        env:
+          GITHUB_TOKEN: ${{ secrets._GITHUB_TOKEN }}
+          DISCORD_WEBHOOK_URL: ${{ secrets.DISCORD_WEBHOOK_URL }}
diff --git a/ci/sub b/ci/sub
index 5f8f9b685..6c43b0f09 160000
--- a/ci/sub
+++ b/ci/sub
@@ -1 +1 @@
-Subproject commit 5f8f9b6858a96583654d14397f7ea5ad7f0aea51
+Subproject commit 6c43b0f09ebb55be1d418e9ee4ff543ca513340b