github.com/SwuduSusuwu/SubStack.git now has certificate (for new commits).
Signature is "SHA256:cZ62ZXjPj45EKWnHBh4Wvar8zWsU9M3S0OfcADrGTGE".
Our repository on GitHub (which you can download with git clone https://github.com/SwuduSusuwu/SubStack.git
) will use `git commit -S` (signature is SHA256:cZ62ZXjPj45EKWnHBh4Wvar8zWsU9M3S0OfcADrGTGE
) for all new commits since commit 3efe601.
To do this alone (local), view GitLab's howto do local comparison of signatures on commits, or our ./README.md#Signaturecertificate (from commit 84429a1,)
which amounts to:
echo “2002swudususuwu@gmail.com namespaces=\"git\" ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDgPpitrMKMQLQJDhH0S5asFwowe1O5+f0Z+sPA1N9H9 2002swudususuwu@gmail.com” > allowed_signers
git config gpg.ssh.allowedSignersFile "allowed_signers"
once setup, you just execute git log —show-signatures
(which outputs Good "git" signature for 2002swudususuwu@gmail.com with ED25519 key SHA256:cZ62ZXjPj45EKWnHBh4Wvar8zWsU9M3S0OfcADrGTGE for new commits), or git verify-commit <ref>
(where <ref>
is the hash of an individual commit).
Optional: compare this to our ./.ssh/allowed_signers values.