Added template sign workflow (#8423)

* Added template sign workflow

* run upon push

.github/workflows/template-sign.yml

@@ -0,0 +1,51 @@
+name: ☑️ Template Sign
+
+on:
+  push:
+    branches:
+      - main
+    paths:
+      - '**.yaml'
+  workflow_dispatch:
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+        with: 
+          fetch-depth: 0
+
+      - name: Set up Go
+        uses: actions/setup-go@v4
+        with:
+          go-version: 1.21.x
+
+      - name: nuclei install
+        run: go install -v github.com/projectdiscovery/nuclei/v2/cmd/nuclei@dev
+
+      - name: Template Sign
+        id: sign
+        run: |
+          nuclei -lfa -duc -sign -t /home/runner/work/nuclei-templates/nuclei-templates
+          nuclei -lfa -duc -t /home/runner/work/nuclei-templates/nuclei-templates
+          git status -s | wc -l | xargs -I {} echo CHANGES={} >> $GITHUB_OUTPUT
+        env:
+          NUCLEI_USER_CERTIFICATE: ${{ secrets.NUCLEI_USER_CERTIFICATE }}
+          NUCLEI_USER_PRIVATE_KEY: ${{ secrets.NUCLEI_USER_PRIVATE_KEY }}
+          
+      - name: Commit files
+        if: steps.sign.outputs.CHANGES > 0
+        run: |
+          git config --local user.email "action@github.com"
+          git config --local user.name "GitHub Action"
+          git add cves.json cves.json-checksum.txt
+          git commit -m "Auto Template Signing [$(date)] :robot:" -a
+
+      - name: Push changes
+        if: steps.sign.outputs.CHANGES > 0
+        run: |
+          git pull --rebase
+          git push origin ${{ github.ref }}
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}