Feature - Show if a commit is signed

Open Swordington opened this issue 5 years ago • 2 comments

While this may not be possible, it would be nice to check the signing status of a commit. This would would allow CI to automatically fail any unsigned commits, to check the overall security of a project, etc.

Dec 30 '20 18:12 Swordington

@Swordington PR welcome! You could modify https://github.com/node-modules/last-commit-log/blob/7f62323d7c96a9d256f19b15b24ed1350eebb342/index.js#L27-L47 to have https://stackoverflow.com/a/32038784 and parse out GOOD/BAD etc.

Apr 30 '23 16:04 titanism

You could also have it run another command if that's easiest to get this as proof of concept.

https://git-scm.com/docs/git-verify-commit

But having one command do it all would be best

Apr 30 '23 16:04 titanism