3 ms·
I think letting me give you a gpg private key and you sign commits with that would be ideal. I'm not sure how the app signing commits would work, since it needs
by njaremko 3y ago
I think letting me give you a gpg private key and you sign commits with that would be ideal. I'm not sure how the app signing commits would work, since it needs to be signed by a member of our org I believe?
- amtamt 3y agothen why not let them generate the key itself?
- njaremko 3y agoSo I can revoke the key if I need to (my understanding is that you need the private key for that)
- Xiulung 3y agoYep, our app signing the commits would mean requiring your org to approve the app as "someone" who can contribute to the repo