• 0 Posts
  • 8 Comments
Joined 1 year ago
cake
Cake day: July 2nd, 2023

help-circle





  • Electric@lemmy.worldtoProgramming@programming.devUnsigned Commits
    link
    fedilink
    arrow-up
    5
    arrow-down
    1
    ·
    10 months ago

    Can someone explain this article? I’m not sure what signing a commit is. If it’s the information appended with a commit (username, time of commit, commit message), then it sounds insane to be against that. It’s so helpful to not only know who did what in case you need to reach out to the person behind something, but also knowing the why behind it can be important.

    The majority of the issues the author has seem strange to me. I can understand not wanting GitHub to be this central authority. However, in what world is making a commit to a repo indicative of one endorsing every single line in a repo? And the security issues just come down to “don’t let your data leak”. Though that could be an issue if GitHub leaks it themselves.