Fix multiple commits edge case

[MuriloDalRi]

Adding a commit to a Dependabot PR triggered an error where it expected a commit message in a Dependabot format. It should not proceed if there are multiple commits.

Trello

[sengi]

Do you also need to make it verify that all commits are signed by Dependabot? (or do you already do that? apologies I've only v briefly skimmed the code here)

[MuriloDalRi]

Do you also need to make it verify that all commits are signed by Dependabot? (or do you already do that? apologies I've only v briefly skimmed the code here)

That happens here

[sengi]

Do you also need to make it verify that all commits are signed by Dependabot? (or do you already do that? apologies I've only v briefly skimmed the code here)

That happens here

I don't think that does what you think it does 😅

[MuriloDalRi]

Do you also need to make it verify that all commits are signed by Dependabot? (or do you already do that? apologies I've only v briefly skimmed the code here)

That happens here

I don't think that does what you think it does 😅

Oh you mean verifying the GPG keys?

[sengi]

I don't think that does what you think it does 😅

Oh you mean verifying the GPG keys?

Yeah. I don't think it's currently even checking that Dependabot is the only committer. Pretty sure it's only checking that Dependabot raised the PR, which doesn't really tell us much.

[MuriloDalRi]

I don't think that does what you think it does 😅

Oh you mean verifying the GPG keys?

Yeah. I don't think it's currently even checking that Dependabot is the only committer. Pretty sure it's only checking that Dependabot raised the PR, which doesn't really tell us much.

That's a good point, I'll raise a new PR to add that check!

[MuriloDalRi]

@sengi @ChrisBAshton I've raised #62 to address the commit signing issue. Both PRs are ready for review now.