Why do you say that? It seems like they would be more important in the context o... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		samcat116 on Jan 23, 2024 \| parent \| context \| favorite \| on: Forging signed commits on GitHub Why do you say that? It seems like they would be more important in the context of supply chain attacks.

jaimex2 on Jan 31, 2024 [–]

If they were able to get your keys to push a commit or sneak code into your branch we are waaaaay past the territory where a signed commit can be trusted.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact