3 ms·

For sure the competition is making us both better. Coincidentally we're working on the same feature in https://gitlab.com/gitlab-org/gitlab-ce/issues/4232 https

by sytse 11y ago

For sure the competition is making us both better. Coincidentally we're working on the same feature in https://gitlab.com/gitlab-org/gitlab-ce/issues/4232 https://gitlab.com/gitlab-org/gitlab-ce/issues/4232 but congrats to GitHub for shipping it sooner.

ChristianBundy 11y ago
Looks this this is Gitlab EE only though, is that right?
- gpm 11y ago
  (I only know what I read on the issue tracker) The part that GitHub implemented (uploading keys to the site, displaying verified signed commits in the UI) looks like it is both. Configuring a project to only accept signed commits in various ways looks to be EE only.
- sytse 11y ago
  This is planned for both GitLab CE and EE
ashitlerferad 11y ago
Can you implement OpenPGP-signed pushes?
- sytse 11y ago
  Interesting, consider creating an issue for that and crosslink it from the existing issue.
ashitlerferad 11y ago
Also, please don't display keyids, always fingerprints: https://help.riseup.net/en/security/message-security/openpgp/best-practices#dont-rely-on-the-key-id https://help.riseup.net/en/security/message-security/openpgp...