News for hackers. Stuff that matters.

A comment on SSH commit verification now supported. Parent comment

Re:SSH commit verification now supported by fariszr on Tuesday August 23, 2022 @02:32PM (#32569131)
Is there any other Git host/platform that supports it? Gitea/GitLab?
[ Parent | on HN ]
Re:SSH commit verification now supported by sytse on Tuesday August 23, 2022 @02:53PM (#32569474)
It seems on GitLab this is being working on in https://gitlab.com/gitlab-org/gitlab/-/issues/343879 with part of the work already merged in https://gitlab.com/gitlab-org/gitlab/-/merge_requests/87962 and https://gitlab.com/gitlab-org/gitlab/-/merge_requests/88693
[ Parent | on HN ]
Re:SSH commit verification now supported by fariszr on Tuesday August 23, 2022 @03:11PM (#32569793)
What about Sigstore, is there any plan on supporting it?
[ Parent | on HN ]
Re:SSH commit verification now supported by wlynch on Tuesday August 23, 2022 @03:15PM (#32569872)
You can find the feature request for supporting keyless sigstore/gitsign at https://gitlab.com/gitlab-org/gitlab/-/issues/364428
[ Parent | on HN ]
Re:SSH commit verification now supported by sytse on Tuesday August 23, 2022 @06:27PM (#32572424)
Sorry, I missed the context your original question was about Sigstore. Someone answered in https://news.ycombinator.com/item?id=32569872
[ Parent | on HN ]
Re:SSH commit verification now supported by wlynch on Tuesday August 23, 2022 @03:21PM (#32569995)
Worth calling out that gitsign works with any Git host for the commit signatures / verification!

The main piece that's platform specific is the Verified badges that you see in the UI + any CI checks.

[ Parent | on HN ]
Re:SSH commit verification now supported by francoispon on Tuesday August 23, 2022 @11:46PM (#32574757)
I think github support came out a year and half after the feature was available in git (nov 2021), so that may going to be a while :(
[ Parent | on HN ]