forged commit: https://github.com/git-forge/fraudulent/commit/95321ee7b3e25f99eadf03f5af7005e4b6c1be3e https://github.com/git-forge/fraudulent/commit/95321ee7b3

forged commit: https://github.com/git-forge/fraudulent/commit/95321ee7b3e25f99eadf03f5af7005e4b6c1be3e https://github.com/git-forge/fraudulent/commit/95321ee7b3e25... authentic commit: https://github.com/bsdlp/packagebot/commit/c7cd115357f51e8e18daa82d4d497079c93d0cec https://github.com/bsdlp/packagebot/commit/c7cd115357f51e8e1... you can use a gpg key to sign your commits and tell github about your public key so they can add a verified badge in the commit log. really only useful if github can enforce authenticity when pushing to repos...