Re: Requiring GPG Commit Signing
| From: | Bilge | Date: | Tue, 02 Apr 2024 15:58:12 +0000 |
| Subject: | Re: Requiring GPG Commit Signing | ||
| References: | 1 2 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-122877@lists.php.net to get a copy of this message | ||
On 02/04/2024 15:55, Calvin Buckley wrote:
On Apr 2, 2024, at 11:15 AM, Derick Rethans<derick@php.net> wrote:FWIW, I'm a drive-by contributor and I have GPG signing <https://github.com/php/php-src/pull/13845/commits> set up.What do y'all think about requiring GPG signed commits for the php-src repository? I had a look, and this is also something we can enforce through GitHub as well (by using branch protections).Would this affect only direct pushes to master, or would it be required for pull requests too? I'd be worried the average drive-by contributor wouldn't have GPG signing set up.