lab icon indicating copy to clipboard operation
lab copied to clipboard

Create command for retrieving user's SSH and GPG key

Open bmeneg opened this issue 1 year ago • 1 comments

When a user works with signed commits (SSH or GPG key) and wants to verify the keys locally, one must retrieve the public key for the commit's author from GitLab's database and add it to the allowed_signers file (or the file pointed by gpg.ssh.allowedSignersFile git config) and/or the GPG local keyring, enabling the signature verification on git log --show-signatures.

For that, we must use User's API endpoint, which is also available in go-gitlab package.

bmeneg avatar Mar 07 '24 01:03 bmeneg

At first, we can just print enough information for the user and let one deal with adding that public key to the correct place: "allowed_signers" file in case of SSH signature, and GPG keyring for GPG signature, avoiding system differences, eg. gpg gpg2 gnome-keyring....

bmeneg avatar Mar 07 '24 01:03 bmeneg