logoalt Hacker News

lrvickyesterday at 9:06 PM1 replyview on HN

Note: This will not work and cannot work on repos that use signed commits from multiple authors.

Signed git history is immutable, and unsigned git history is a supply chain attack vector.

That said I could see this being useful for single-author WIP branches doing cleanup before a PR


Replies

YonathanTesfayetoday at 8:42 AM

added a warning for this in v0.2.0 signed commits now flag before the rewrite, it can know resign rebuilt commits with your key.

https://github.com/TheRealYT/git-knife/releases/tag/v0.2.0