Excavator: Update policy-bot config (#60)

.policy.yml

@@ -7,7 +7,7 @@ policy:
       - two admins have approved
       - changelog only and contributor approval
       - fixing excavator
-      - excavator only touched baseline, circle, gradle files, godel files, docker-compose-rule config or versions.props
+      - excavator only touched baseline, circle, gradle files, godel files, go dependencies, docker-compose-rule config or versions.props
       - excavator only touched config files
       - bots updated package.json and lock files
   disapproval:
@@ -50,7 +50,7 @@ approval_rules:
       has_author_in:
         users: [ "svc-excavator-bot" ]
 
-  - name: excavator only touched baseline, circle, gradle files, godel files, docker-compose-rule config or versions.props
+  - name: excavator only touched baseline, circle, gradle files, godel files, go dependencies, docker-compose-rule config or versions.props
     requires:
       count: 0
     if:
@@ -65,15 +65,22 @@ approval_rules:
           - "^\\.circleci/.*$"
           - "^\\.docker-compose-rule\\.yml$"
           - "^.*gradle$"
+          - "^\\.palantir/go-version$"
           - "^gradle/wrapper/.*"
           - "^gradlew$"
           - "^gradlew.bat$"
           - "^gradle.properties$"
           - "^settings.gradle$"
+          - "^go.mod$"
+          - "^go.sum$"
           - "^godelw$"
           - "^godel/config/godel.properties$"
+          - "^godel/config/godel.yml$"
+          - "^vendor/.*$"
           - "^versions.props$"
           - "^versions.lock$"
+      has_valid_signatures_by_keys:
+        key_ids: ["C9AF124A484882E0"]
 
   - name: excavator only touched config files
     requires:
@@ -85,6 +92,8 @@ approval_rules:
         paths:
           - "^\\..*.yml$"
           - "^\\.github/.*$"
+      has_valid_signatures_by_keys:
+        key_ids: ["C9AF124A484882E0"]
 
   - name: bots updated package.json and lock files
     requires:
@@ -98,3 +107,5 @@ approval_rules:
         paths:
           - "^.*yarn.lock$"
           - "^.*package.json$"
+      has_valid_signatures_by_keys:
+        key_ids: ["C9AF124A484882E0"]