import-org-gpg-keys.sh

export ORG="Scantrust"

echo "Importing GPG keys for all members of ${ORG}..."
for LOGIN in $(gh api --paginate "orgs/${ORG}/members" -q '.[].login'); do
    NAME=$(gh api "users/${LOGIN}" -q '.name')
    echo "[${NAME} - ${LOGIN}]"

    # Fetch GPG keys from GitHub API and filter out any null keys
    # Exit if no keys found
    keys=$(
        gh api "users/${LOGIN}/gpg_keys" \
        | jq -c '.[] | select(.raw_key != null and .raw_key != "")'
    )
    [ -z "$keys" ] && continue

    echo "${keys}" | while read -r key_data; do
        key_id=$(echo "${key_data}" | jq -r '.key_id')
        raw_key=$(echo "${key_data}" | jq -r '.raw_key')

        if ! gpg --list-keys "${key_id}" &>/dev/null; then
            echo "${raw_key}" | gpg --import
        else
            echo "   > ${key_id} already imported"
        fi
    done
done