3 ms·
I'm excited to see this roll out but note the IMO important caveat here that GitHub does not currently show a gitsigned commit as "Verified". Also, this is cha
by newman314 4y ago
I'm excited to see this roll out but note the IMO important caveat here that GitHub does not currently show a gitsigned commit as "Verified".
Also, this is challenging to get working on a remote VM due to the auth process. My understanding is there is work under way to sort this out.
- dlor 4y agoWe're working on a GitHub App to work around the badge issue - it will also let you specify fine-grained policies instead of just signed or unsigned. The tty issue on remote VMs is also getting fixed soon! Disclosure: I work on Sigstore.