Add info on how to verify/sign commits on GitHub
Open
Nobody has claimed this yet.
topic-git
topic-github
type-feature
- Dominant language
- Python
- Stars
- 2.1k
- Forks
- 1k
- Avg merge
- 2d 12h
- Merged PRs (30d)
- 12
Description
GitHub documentation about verified commits: https://docs.github.com/en/authentication/managing-commit-signature-verification/about-commit-signature-verification
We should advise contributors to sign and verify their commits. This way, we can be sure that they actually own the email address they use in their commits.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start with the linked GitHub documentation on commit signature verification, then find the contributor guidance in the devguide where commit practices are described. Done means the guide advises contributors to sign and verify commits and explains that this helps confirm ownership of the commit email address.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- github
- Domain
- documentation
- Issue type
- Documentation
- Difficulty
- 2/5
- Estimated time
- 1-3 hours
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 45/100