> or we accept this doesn’t provide significant benenfit beyond enforcing branch protection rules and restricting pushes based on SSH keys. This seems wrong. I

> or we accept this doesn’t provide significant benenfit beyond enforcing branch protection rules and restricting pushes based on SSH keys. This seems wrong. It ensures you can't push commits on behalf of a third-party since it would require their keys. Auth and branch protection only covers write access and allows you to push any unsigned commit. I wrote a piece about signing with certificates instead of keys [1]. Unfortunately most of the issues highlighted in this post hold true for certificates too. [1] https://sayr.us/git/ssh-sign-ca/ https://sayr.us/git/ssh-sign-ca/