https://github.com/suhailroushan13/signed-commits
A signed commit is one where the author of the commit has digitally signed the commit using a GPG key. This digital signature confirms that the author of the commit is who they say they are and that the code has not been tampered with since it was committed.
https://github.com/suhailroushan13/signed-commits
ed25519 git gpg pgp signed-commits
Last synced: 30 days ago
JSON representation
A signed commit is one where the author of the commit has digitally signed the commit using a GPG key. This digital signature confirms that the author of the commit is who they say they are and that the code has not been tampered with since it was committed.
- Host: GitHub
- URL: https://github.com/suhailroushan13/signed-commits
- Owner: suhailroushan13
- Created: 2022-10-30T23:04:11.000Z (over 3 years ago)
- Default Branch: master
- Last Pushed: 2025-03-16T15:40:16.000Z (over 1 year ago)
- Last Synced: 2025-03-16T16:35:40.168Z (over 1 year ago)
- Topics: ed25519, git, gpg, pgp, signed-commits
- Language: Shell
- Homepage: https://github.com/suhailroushan13/Signed-Commits
- Size: 16.6 KB
- Stars: 0
- Watchers: 1
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
Awesome Lists containing this project
README
# How to Make Signed Commits in GitHub
Signing, or code signing specifically, is the process of using cryptography to digitally add a signature to data. The receiver of the data can verify that the signature is authentic, and therefore must've come from the signatory. It's like physical signatures, but digital and more reliable
# Quick Guide to Sign Your Git Commits
### Why Should I Sign Git Commits?
Clearly, this is the first question that bumps into your mind after hearing about signing Git commits.
Okay, if you’re into Git, you might have already known that you can change git commit author name and email in a simple command.
### GitHub Config SetUp
```bash
git config --global user.name "YOUR_GITHUB_USERNAME"
git config --global user.email "YOUR_GITHUB_EMAIL"
```
### When Running for the First Time it will ask for Name , Email , Password , Passphrase
```bash
gpg --full-generate-key
```
## Screenshots
### Get Your KEY ID
```bash
gpg --list-secret-keys --keyid-format LONG
```
### Example :
```bash
/Users/hubot/.gnupg/secring.gpg
------------------------------------
sec 4096R/3AA5C34371567BD2 2016-03-10 [expires: 2017-03-10]
uid Hubot
ssb 4096R/42B317FD4BA89E7A 2016-03-10
```
#### Here The Key ID is **3AA5C34371567BD2**
### Make your key public and recognizable around Internet now. Run this command:
```bash
gpg --send-keys 3AA5C34371567BD2
```
Don’t worry, this command will send public key only, it never sends your secret key!
### Add key to Github
Now, let’s export your public key from key ID.
```bash
gpg --armor --export 3AA5C34371567BD2
```
### Example
Copy From ---- BEGIN PGP to KEY BLOCK -------
```bash
-----BEGIN PGP PUBLIC KEY BLOCK-----
-----END PGP PUBLIC KEY BLOCK-----
```
### Go to Settings > SSH and GPG keys section on Github.
### Click green button to add New GPG Key.
### Copy and paste above public key and click button to add.
## Screenshots
### Check Where is gpg in your Folders
```bash
which gpg
```
### Example
```bash
/usr/bin/gpg
```
### Add Path
```bash
git config --global gpg.program "/usr/bin/gpg"
```
### Check your Key ID
```bash
gpg --list-secret-keys --keyid-format LONG
/home/suhail/.gnupg/pubring.kbx
-------------------------------
sec rsa3072/3AA5C34371567BD2 2022-10-30 [SC] [expires: 2024-10-29]
F7EFC23FF92C79301F40847852AE60C1EE3A6501
uid [ultimate] suhailroushan
ssb rsa3072/AD20B7AA5EFC0B10 2022-10-30 [E] [expires: 2024-10-29]
```
Your Key ID Is **3AA5C34371567BD2** from sec
### Add the Signing Key to your global git config so that all your git commits are verified
```bash
git config --global user.signingkey 3AA5C34371567BD2
git config --global commit.gpgsign true
```
### Open git config file from ~/.gitconfig and add following lines in it.
```bash
[tag]
gpgsign = true
```
### Type this in Terminal
```bash
export GPG_TTY=$(tty)
```
### Clone Any Repo
```bash
git clone git@github.com:suhailroushan13/Signed-Commits.git
Make Changes
git add .
git commit -m "Changes Done"
git push origin master
```