logoalt Hacker News

nubinetworkyesterday at 6:44 PM3 repliesview on HN

While git has always allowed this, I don't really like the idea that someone can write some code, slap my name on it, and push it to their repo.


Replies

delducayesterday at 6:45 PM

You can sign your commits with OpenPGP.

codazodayesterday at 6:45 PM

I think this is why signed commits are also supported. My first thought was that this probably doesn’t work with signed commits. But, maybe it does since they are listed as the commiter.

mschuster91yesterday at 6:48 PM

Yup. At the very least, the "big dogs" aka Github and Gitlab should allow you to "claim" an email address to an account and only link it up when the commit in question either directly got authored from the web UI or got cryptographically signed.