Comments (5)
Forgive my ignorance, but please explain ?
I know what PGP is, so is this some setting I need to enable on the release build stuff ?
Regards
Chris
from chrysalisp.
This is the first I hear of PGP signed commits.
from chrysalisp.
The Pro Git Book, which I'd kind-of consider the official git documentation, covers this in the following chapters:
5.3 Distributed Git - Maintaining a Project
Specifically, check the subsection "Tagging Your Releases":
https://git-scm.com/book/en/v2/Distributed-Git-Maintaining-a-Project
7.4 Git Tools - Signing Your Work:
Do note the disclaimer at the end though, "Everyone Must Sign":
https://git-scm.com/book/en/v2/Git-Tools-Signing-Your-Work
10.3 Git Internals - Git References:
Specifically, check the subsection "Tags":
https://git-scm.com/book/en/v2/Git-Internals-Git-References
Note however, some gotchas:
-
Presumably, you might wish to use some subkey(s) of your existing public PGP key(if any), for details on how to do so, see here: https://stackoverflow.com/a/50986820. Note however that the example given there uses a short key ID, a TERRIBLE idea, see here for why: https://security.stackexchange.com/q/84280
-
Revocation entails... issues, albeit not unsolvable ones, as showcased here: https://karl.kornel.us/2017/10/welp-there-go-my-git-signatures/
GitHub also has a section on it but... I'D STRONGLY recommend reading that only after you've understood how it OUGHT TO work, based on the above; as the GitHub documentation on this leaves quite a few key pieces out:
https://help.github.com/articles/managing-commit-signature-verification/
https://help.github.com/articles/troubleshooting-commit-signature-verification/
from chrysalisp.
It's took a great while!
But no. I'll not be doing this ever.
from chrysalisp.
It's took a great while!
But no. I'll not be doing this ever.
🤷🏼 understandable, have a great day
from chrysalisp.
Related Issues (20)
- Transition Log Service to new IPC and data exchangers HOT 1
- Fix yaml string quote compounding
- Display scaling options? HOT 5
- src/main.cpp:37:11: fatal error: 'SDL.h' file not found HOT 5
- Package manager needed HOT 3
- @Chris HOT 16
- Containers woven in to foundations HOT 1
- Interprocess communication port needed HOT 4
- WYSIWYG interface builder HOT 6
- A browser for ChrysaLisp pages. HOT 10
- WebDriver compatible functional UI clicking test automation HOT 1
- reload definitions in lisp HOT 3
- error while compiling HOT 3
- error HOT 1
- rather a request: RISCV would be great HOT 10
- SDL2 dep for building on Macs - tweaks needed? HOT 9
- Bootstrapping ChrysaLisp on ChrysaLisp? HOT 10
- README feedback HOT 5
- Transparent windows HOT 1
- Can it run Doom? HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from chrysalisp.