3 ms·
Finally. Github does not recognize GPG signatures for commits where the e-mail field does not match an e-mail address verified with GH. So you'd have to make yo
by 3np 4y ago
Finally. Github does not recognize GPG signatures for commits where the e-mail field does not match an e-mail address verified with GH. So you'd have to make your e-mail public to have your commits show as green. This seems to fill that gap.
(Using a burner has the problem that a valid-looking mail might have people legitimately try to reach out, which is not nice)
- deric4 4y agoyou can use your no-reply email address https://docs.github.com/en/authentication/managing-commit-signature-verification/associating-an-email-with-your-gpg-key https://docs.github.com/en/authentication/managing-commit-si... `ID+username@users.noreply.github.com`
- NetOpWibby 4y agoWow, had no idea this was possible.
- 3np 4y agoOh, I think that's relatively new? Tried to do exactly that a year or two back but wasn't recognized then.
- computerfriend 4y agoYou can add and verify an email address without making it public in GitHub. But, the PGP signature is public and contains the email address associated with the signing key, so if you use PGP signatures at all, your email address is public anyway, regardless of the "verified commit" badge.
- 3np 4y agoWell yes but `username-noreply@example.com` should make it immediately clear that no one will be reading e-mail sent there. As noted in a sibling, GH now recognizes using the github noreply addresses since some time a well.