Gentoo org was hacked on GitHub, and had their source code modified. Luckily, their private build infrastructure used only their own personal git repo, which re

Gentoo org was hacked on GitHub, and had their source code modified. Luckily, their private build infrastructure used only their own personal git repo, which required signing all commits (and presumably checking them). https://www.gentoo.org/news/2018/06/28/Github-gentoo-org-hacked.html https://www.gentoo.org/news/2018/06/28/Github-gentoo-org-hac... You can even turn on branch protection in GitHub these days that rejects unsigned commits. https://help.github.com/en/github/administering-a-repository/enabling-required-commit-signing https://help.github.com/en/github/administering-a-repository...