Signing Commits in Git, Explained

Why would you sign your commits in Git? How would you do it? How is it even done? Let's dig into signing commits in Git.

6 comments

It's pretty easy to set up, and gives you an added way to verify that the code in your repository is supposed to be there.
It's nice and all, but in a GitHub/GitLab PR workflow world, your commits are mostly squashed and rewritten by the remote, so it doesn't even show up on main

So there's really only a benefit if you don't use squash and bother with maintaining proper commit messages in your PRs
- This is yet another reason not to squash commits.
- So there’s really only a benefit if you don’t use squash and bother with maintaining proper commit messages in your PRs
  
  I'd argue that you should never squash and always maintain proper commit messages...
  
  Not very convincing without reasoning

6 comments