git commit hook should check for signature
Open
Nobody has claimed this yet.
buildsystem
enhancement / improvement
- Dominant language
- Makefile
- Stars
- 1.6k
- Forks
- 211
- Avg merge
- 4d 21h
- Merged PRs (30d)
- 6
Description
Some commits made it into the tree without GPG signatures. The local git should prevent this from happening and we should have something that verifies it on the server side, too.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by locating how local Git commit hooks are configured and what server-side verification mechanism this repository uses. The work is complete when unsigned commits are prevented locally and also detected or rejected by the server-side check.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- git
- Domain
- security
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 35/100