INFRA-92: add signing commits to workflow (#1863)

# Description

Added signing commit mechanism to node image update workflow

## Type of change

Please delete options that are not relevant.

- Workflow fix (non-breaking change which fixes an issue)

# Checklist:

<!-- delete when not applicable to your PR -->

- I have made neccessary updates to the workflows

.github/workflows/_check-vars-and-secrets.yml

@@ -37,6 +37,8 @@ jobs:
             -z '${{ secrets.AWS_MAINNET_SECRET_ACCESS_KEY }}' || \
             -z '${{ secrets.AUTOCOMMIT_AUTHOR }}' || \
             -z '${{ secrets.AUTOCOMMIT_EMAIL }}' || \
+            -z '${{ secrets.AUTOCOMMIT_GPG_KEY_B64 }}' || \
+            -z '${{ secrets.AUTOCOMMIT_GPG_KEY_FINGERPRINT }}' || \
             -z '${{ secrets.CI_DEVNET_S3BUCKET_NAME }}' || \
             -z '${{ secrets.CI_MAINNET_S3BUCKET_NAME }}' || \
             -z '${{ secrets.CI_GH_USER }}' || \

.github/workflows/_update-node-image-infra.yml

@@ -85,6 +85,14 @@ jobs:
               "aleph-node-validator-image-placeholder=${{ env.DEPLOY_IMAGE }}"
           done
 
+      - name: Configure signing key
+        # yamllint disable rule:line-length
+        run: |
+          echo ${{ secrets.AUTOCOMMIT_GPG_KEY_B64 }} | base64 -d > key.gpg
+          gpg --import key.gpg
+          rm key.gpg
+          git config --global user.signingkey $(echo ${{ secrets.AUTOCOMMIT_GPG_KEY_FINGERPRINT }} | tail -c 17)
+
       - name: GIT | Commit changes to argocd apps repository.
         uses: EndBug/[email protected]
         env:
@@ -94,4 +102,5 @@ jobs:
           author_email: ${{ secrets.AUTOCOMMIT_EMAIL }}
           message: "Update ${{ inputs.env }} aleph-node tag ${{ env.TAG }}"
           add: "*.yaml"
+          commit: -S
           cwd: ${{ secrets.REPO_ARGOCD_APPS_NAME }}

.github/workflows/on-pull-request-commit.yml

@@ -22,7 +22,7 @@ jobs:
         uses: Cardinal-Cryptography/github-actions/check-pr-title@v7
         with:
           pr-title: ${{ github.event.pull_request.title }}
-          regexp: '(A0|L1|CW)-[0-9]+'
+          regexp: '(A0|L1|CW|INFRA)-[0-9]+'
 
   code-formatting:
     name: Check code formatting