> but will not protect you against server compromise (because public key directory and signing enforcement are done on the server) Which is why it's important

> but will not protect you against server compromise (because public key directory and signing enforcement are done on the server) Which is why it's important for the security team to directly manage and be responsible for the code repository server. Usually the server also stores all the git repositories in some filesystem directory, meaning that server compromise would allow an attacker to remove all the company's code, regardless of permissions set for those repositories, and potentially leak it.