Re: Requiring GPG Commit Signing
| From: | Calvin Buckley | Date: | Tue, 02 Apr 2024 14:55:05 +0000 |
| Subject: | Re: Requiring GPG Commit Signing | ||
| References: | 1 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-122871@lists.php.net to get a copy of this message | ||
On Apr 2, 2024, at 11:15 AM, Derick Rethans <derick@php.net> wrote:
>
> What do y'all think about requiring GPG signed commits for the php-src
> repository?
>
> I had a look, and this is also something we can enforce through GitHub
> as well (by using branch protections).
Would this affect only direct pushes to master, or would it be required
for pull requests too? I'd be worried the average drive-by contributor
wouldn't have GPG signing set up.