gpg-wrapper.sh

#!/bin/sh
set -e

# Read the "real" GPG program from the git repository configuration, defaulting to a PATH search for "gpg" just
# as git itself does.
unset GIT_CONFIG_PARAMETERS
GPG_PROGRAM=$(git config gpg.program || echo 'gpg')
PASSPHRASE_ARG=

if [ -n "${ATOM_GITHUB_GPG_PROMPT:-}" ] && [ -n "${GIT_ASKPASS:-}" ]; then
  SIGNING_KEY=$(git config user.signingkey)
  if [ -n "${SIGNING_KEY}" ]; then
    PROMPT="Please enter the passphrase for the GPG key '${SIGNING_KEY}'."
  else
    PROMPT="Please enter the passphrase for your default GPG signing key."
  fi

  PASSPHRASE=$(${GIT_ASKPASS} "${PROMPT}")
  PASSPHRASE_ARG="--passphrase-fd 3"
fi

exec "${GPG_PROGRAM}" --batch --no-tty --yes ${PASSPHRASE_ARG} "$@" 3<<EOM
${PASSPHRASE}
EOM