conventional-changelog / conventional-changelog/commitlint

allow to require signed commits

Open
#321 5 comments 2 reactions 0 assignees View on GitHub
Dominant language
TypeScript
Stars
18.7k
Forks
970
Avg merge
7h 33m
Merged PRs (30d)
49

Description

## Expected Behavior
A commit should be rejected if commitlint is configured for requiring a signed commit.

## Current Behavior
There is no option to require signed commits.

## Affected packages
* [ ] cli
* [x] core
* [ ] prompt
* [ ] config-angular

## Context
I would like to have me and my contributors to require sign git commits.
There is support for this in github. And in the github project settings one could configure that signed commits are required on PRs, but if just refuses to merge a PR instead of refuse to accept a commit.
Failing more early would simplify the process.

Contributor guide

Open the contributing guide

Research direction

Start in the core package and trace how commitlint configuration is loaded and how commits are currently accepted or rejected. Compare the requested early rejection with GitHub's signed-commit requirement; done means a configured signed-commit requirement rejects unsigned commits while normal behavior remains unchanged.

Written by the indexing model from the issue text.

Assessment

Tech stack
git, typescript
Domain
security, tooling
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.