ci: update publish workflow (#1359)

* ci: update publish workflow

* ci: update publish.yml

.github/workflows/publish.yml

@@ -23,6 +23,14 @@ jobs:
         with:
           fetch-depth: 0
           token: ${{ secrets.BOT_PAT }}
+          
+      - name: Import GPG key
+        uses: crazy-max/ghaction-import-gpg@v5
+        with:
+          gpg_private_key: ${{ secrets.BOT_GPG_KEY }}
+          passphrase: ${{ secrets.BOT_GPG_PASSPHRASE }}
+          git_user_signingkey: true
+          git_commit_gpgsign: true
 
       - name: Setup Node and pnpm
         uses: silverhand-io/actions-node-pnpm-run-steps@v1.2.2
@@ -35,7 +43,16 @@ jobs:
       - name: Publish to GitHub
         # add `no-verify-access` due to https://github.com/lerna/lerna/issues/2788
         run: |
-          pnpm lerna publish -m "release: %s" --conventional-commits --preid=${{ github.event.inputs.preid }} --no-verify-access --create-release=github --yes ${{ github.event.inputs.semver }}
+          pnpm lerna publish \
+            -m "release: %s" \
+            --conventional-commits \
+            --preid=${{ github.event.inputs.preid }} \
+            --no-verify-access \
+            --create-release=github \
+            --sign-git-commit \
+            --sign-git-tag \
+            --yes \
+            ${{ github.event.inputs.semver }} ${{ github.event.inputs.append }}
         env:
           GH_TOKEN: ${{ secrets.BOT_PAT }}