19 ms·

Is there anything more pointless than signed commits? If your security team ever enforced it you're probably already pwned but may as well replace them just in

Is there anything more pointless than signed commits? If your security team ever enforced it you're probably already pwned but may as well replace them just in case.

samcat116 3y ago
Why do you say that? It seems like they would be more important in the context of supply chain attacks.
- jaimex2 3y ago
  If they were able to get your keys to push a commit or sneak code into your branch we are waaaaay past the territory where a signed commit can be trusted.