3 ms·
Do signed commits solve the integrity problem?
by IanCal 6y ago
Do signed commits solve the integrity problem?
- hashworks 6y agoYes. Git commits include the hash of the previous commit, creating a cryptographic chain. If you can verify the signature at the tip of a branch you effectively verify the complete history of the branch. Sadly not every maintainer signs their commits or tags.