melanie / verify-commits.md

0 likes
0 forks
1 files
Last active 1732918060

How to Verify Your Commits

Anyone can be anyone when it comes to commits. For example, here is a commit where ""Linus Torvalds"" deletes Linux. I put this document together for myself a while back, but I thought I would share it with other people who want a straightforward guide to setting up commit signing with GPG.

Instructions

  1. Install gpg brew install gnupg2 (or sudo apt-get install gnupg2, etc)
  2. Generate the key with gpg --full-generate-key (the default type is probably fine)
  3. Make sure it is at least 4096 bits
  4. Make sure you use your Github no-reply email or an email provided to your Github account.
Newer Older