News for hackers. Stuff that matters.
Re:Linus Torvalds: “GitHub creates useless garbage merges” by dathinab on Monday September 06, 2021 @05:33PM (#28438354)
Local (and preferable with HSM) is the only way, or else it would undermine the point of signing commits.

Through if you just want commits to be signed, then GitHub does it for you as it (always??) signs commits created by their UI/System with their key.

Generally I would recommend FF-Only commits (independent of signing) and local auto-signing of all commits.

There are no comments on this comment yet.