All gists matching topic docs

melanie / verify-commits.md

0 Favoriten
0 Forks
1 Dateien
Zuletzt aktiv 1741105476

How to Verify Your Commits with GPG, but you probably shouldn't. Just use SSH now.

Anyone can be anyone when it comes to commits. For example, here is a commit where ""Linus Torvalds"" deletes Linux. I put this document together for myself a while back, but I thought I would share it with other people who want a straightforward guide to setting up commit signing with GPG.

Instructions

  1. Install gpg brew install gnupg2 (or sudo apt-get install gnupg2, etc)
  2. Generate the key with gpg --full-generate-key (the default type is probably fine)
  3. Make sure it is at least 4096 bits
  4. Make sure you use your Github no-reply email or an email provided to your Github account.
Neuer Älter