2 ms·
It's not so much about who pushes the branch to a repo and more about verifying who made the commits within a push (as a single push could contain commits from
by aaronbasssett 11y ago
It's not so much about who pushes the branch to a repo and more about verifying who made the commits within a push (as a single push could contain commits from multiple people) and for verifying commit authors we already have commit signing[1]. It's just a pity nobody uses it.
[1]: https://git-scm.com/book/en/v2/Git-Tools-Signing-Your-Work https://git-scm.com/book/en/v2/Git-Tools-Signing-Your-Work