From 11da3f342eef702343083188f5b5d9f8c4eed10d Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Nerijus=20Bend=C5=BEi=C5=ABnas?=
 <nerijus.bendziunas@gmail.com>
Date: Fri, 1 May 2026 10:33:53 +0300
Subject: [PATCH] ci(lint-commits): dogfood GitHub key-lookup signature check
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Point the lint-commits action to the feat/signature-github-key-lookup SHA
and enable the signature check to exercise the new GitHub key-lookup path
against real PR commits.

Signed-off-by: Nerijus Bendžiūnas <nerijus.bendziunas@gmail.com>
---
 .github/workflows/lint-commits.yml | 19 +++++++++++++++----
 1 file changed, 15 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/lint-commits.yml b/.github/workflows/lint-commits.yml
index 9a93fa3..c69fc8f 100644
--- a/.github/workflows/lint-commits.yml
+++ b/.github/workflows/lint-commits.yml
@@ -7,6 +7,8 @@ permissions:
 jobs:
   lint-commits:
     runs-on: ubuntu-latest
+    env:
+      CG_SHA: 2d845b2e0fc8fafdfd83429297756187d2016aac
     steps:
       - name: Checkout code
         # yamllint disable-line rule:line-length
@@ -20,9 +22,18 @@ jobs:
         with:
           path: ~/nltk_data
           key: nltk-averaged-perceptron-tagger-punkt
-      - name: Lint commits
+      - name: Set up uv
         # yamllint disable-line rule:line-length
-        uses: benner/commit-guard@7704c563540b24bb10394e373e508dc664a7f01f  # v0.19.0
+        uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78  # v7.6.0
         with:
-          range: origin/${{ github.base_ref }}..HEAD
-          disable: signature
+          enable-cache: false
+      - name: Install commit-guard from branch
+        run: |-
+          REPO=https://github.com/benner/commit-guard.git
+          uv tool install "git+$REPO@$CG_SHA"
+        shell: bash
+      - name: Lint commits
+        env:
+          BASE_REF: ${{ github.base_ref }}
+        run: commit-guard --range "origin/$BASE_REF..HEAD"
+        shell: bash