Ask HN: Do you gpg sign your Git commits?

Posted by agrinman on Monday May 22, 2017 @05:58PM
from the ask-hn dept.

Do you or your team members cryptographically sign git commits at work?

personal projects?

open-source projects?

( 4 comments | 7 points | on HN )

Re:Ask HN: Do you gpg sign your Git commits? by WorldMaker on Monday May 22, 2017 @07:03PM (#14397562)

I don't currently, but I have been considering it for personal projects as a trial balloon.

At work it sometimes feels tough enough to make sure everyone is comfortable enough with git to push to the step of hoping for signed commits.

Though, as I think of it, as the guy most likely to create version tags, it might be good enough that I adopt the practice, at least for those. Then again, I've not seen a strong need on the projects at work.

[ Parent | on HN ]

Re:Ask HN: Do you gpg sign your Git commits? by agrinman on Monday May 22, 2017 @07:52PM (#14397771)

If it was easy to setup (for you and all your team members) would it be something you'd value at work?

[ Parent | on HN ]

Re:Ask HN: Do you gpg sign your Git commits? by WorldMaker on Tuesday May 23, 2017 @11:14AM (#14401906)

Maybe if I had stricter auditing requirements, which I don't currently have to worry about.

[ Parent | on HN ]

Re:Ask HN: Do you gpg sign your Git commits? by kavehmz on Tuesday May 23, 2017 @12:43AM (#14398841)

Setup is easy I think. And I do sign all my commits. But none of my team members.

[ Parent | on HN ]