SSH commit verification now supported

• gitsign

  10 899 9.1 Go

  Keyless Git signing using Sigstore

  

Shameless plug for the gitsign project in sigstore: https://github.com/sigstore/gitsign

This isn't supported by GitHub yet but we're hopefully working towards that too.

• gitlab

  448 - -

It seems on GitLab this is being working on in https://gitlab.com/gitlab-org/gitlab/-/issues/343879 with part of the work already merged in https://gitlab.com/gitlab-org/gitlab/-/merge_requests/87962 and https://gitlab.com/gitlab-org/gitlab/-/merge_requests/88693

• InfluxDB

  www.influxdata.com featured

  Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

  

• dev-mode

  1 1 0.0 JavaScript

Does anybody know if this only verifies _new_ commits? I've been signing my commits with my SSH key for a while, but older commits still show as unverified in the web UI. They show the hash of the public key the commit was signed with, which matches a public key associated with my account in the account settings, but the commit still says "Unverified".

Example: https://github.com/grncdr/dev-mode/commit/06376070aff042e9d5...

• git

  616 8,080 0.0 C

  A fork of Git containing Windows-specific patches. (by git-for-windows)

  

Signing using SSH keys does not work reliably on Windows: https://github.com/git-for-windows/git/issues/3883

Suggest a related project