search

senzing-factory / build-resources

Collection of utilities to aid with build process
Apache License 2.0
1 stars 1 forks source link

Require signed commits on all community repositories #55

Closed kernelsam closed 11 months ago

kernelsam commented 11 months ago

Required developer actions: See KB instructions for installing gnupg and signing commits locally.

Initially rolled out on all go repositories: https://github.com/Senzing/build-resources/issues/12

Per docs GitHub already uses this flow for commits via the GitHub UI:

GitHub will automatically use GPG to sign commits you make using the web interface. Commits signed by GitHub will have a verified status. You can verify the signature locally using the public key available at https://github.com/web-flow.gpg.

kernelsam commented 11 months ago

All community repositories have signed commits enabled. Updated knowledge base instructions to enable for new repos as well.