2 ms·
Local (and preferable with HSM) is the only way, or else it would undermine the point of signing commits. Through if you just want commits to be signed, then G
by dathinab 5y ago
Local (and preferable with HSM) is the only way, or else it would undermine the point of signing commits.
Through if you just want commits to be signed, then GitHub does it for you as it (always??) signs commits created by their UI/System with their key.
Generally I would recommend FF-Only commits (independent of signing) and local auto-signing
of all commits.