search

mozilla / application-services

Firefox Application Services
https://mozilla.github.io/application-services/
Other
607 stars 225 forks source link

Require signed commits? #825

Closed rfk closed 5 years ago

rfk commented 5 years ago

I thought we'd already set the "require signed commits" bit in this repo, but apparently not. Doing so is a security recommendation from secops, and seems like it will become more valuable as our work makes it into more products. Any objections to enabling this requirement in repo config?

thomcc commented 5 years ago

Didn't we do this already?

rfk commented 5 years ago

I went ahead and did this.