Add tagging workflow and contributing guide

.github/workflows/update-action-tag.yml

@@ -0,0 +1,46 @@
+name: Update Tag
+
+on:
+  workflow_dispatch:
+
+permissions:
+  contents: write
+
+jobs:
+  update-tag:
+    name: Update Tag
+    runs-on: ubuntu-latest
+    environment: release
+
+    steps:
+      - uses: actions/create-github-app-token@v1
+        id: app-token
+        with:
+          app-id: ${{ vars.APP_ID }}
+          private-key: ${{ secrets.APP_PRIVATE_KEY }}
+
+      - uses: actions/checkout@v4
+        with:
+          token: ${{ steps.app-token.outputs.token }}
+
+      - name: Setup
+        uses: mongodb-labs/drivers-github-tools/setup@v2
+        with:
+          aws_role_arn: ${{ secrets.AWS_ROLE_ARN }}
+          aws_region_name: ${{ vars.AWS_REGION_NAME }}
+          aws_secret_id: ${{ secrets.AWS_SECRET_ID }}
+
+      - name: Remove the existing tag
+        run: |
+          export VERSION=$(cat .github/workflows/version.txt)
+          echo "VERSION=$VERSION" >> $GITHUB_ENV
+          git push origin ":${VERSION}"
+
+      - name: Create a new signed tag
+        uses: mongodb-labs/drivers-github-tools/git-sign@v2
+        with:
+          command: git tag -m "Update tag" -s --local-user=${{ env.GPG_KEY_ID }} ${{ env.VERSION }}"
+
+      - name: Push the tag
+        run:
+            git push origin --tags

.github/workflows/version.txt

@@ -0,0 +1 @@
+2

CONTRIBUTING.md

@@ -0,0 +1,32 @@
+# Contributing to this repository
+
+This repository provides shared GitHub Actions for MongoDB drivers.
+
+Opinionated actions for each driver should go in their own folder.
+
+## Linting
+
+This repo uses [pre-commit](https://pypi.org/project/pre-commit/) for managing linting. `pre-commit` performs various
+checks on the files and uses tools that help follow a consistent style within the repo.
+
+To set up `pre-commit` locally, run:
+
+```bash
+brew install pre-commit
+pre-commit install
+```
+
+To run `pre-commit` manually, run `pre-commit run --all-files`.
+
+To run a manual hook like `shellcheck` manually, run:
+
+```bash
+pre-commit run --all-files --hook-stage manual shellcheck
+```
+
+## Version Tag
+
+To bump the version tag, run the "Update Tag" [workflow](https://github.com/mongodb-labs/drivers-github-tools/actions/workflows/update-action-tag.yml).
+
+To change the major version, update `.github/workflows/version.txt` and all references to `mongodb-labs/drivers-github-tools`
+in the repo.

README.md

@@ -45,12 +45,12 @@ Use this action to create signed git artifacts:
 - name: Create signed commit
   uses: mongodb-labs/drivers-github-tools/git-sign@v2
   with:
-    command: "git commit -m 'Commit' -s --gpg-sign=${{ vars.GPG_KEY_ID }}"
+    command: "git commit -m 'Commit' -s --gpg-sign=${{ env.GPG_KEY_ID }}"
 
 - name: Create signed tag
   uses: mongodb-labs/drivers-github-tools/git-sign@v2
   with:
-    command: "git tag -m 'Tag' -s --local-user=${{ vars.GPG_KEY_ID }} <tag>"
+    command: "git tag -m 'Tag' -s --local-user=${{ env.GPG_KEY_ID }} <tag>"
 ```
 
 ### gpg-sign
@@ -156,4 +156,4 @@ If `dry_run` is set, nothing will be published or pushed.
     product_name: winkerberos
     token: ${{ github.token }}
     dry_run: ${{ inputs.dry_run }}
-```
+```