Hello. I apologize if this question has been asked before.
Is there anyway I can configure git to *automatically* verify the signature of the HEAD of any branch it pulls and fail if that signature is bad or missing? I'm hoping for something as convenient as `commit.gpgSign` that can be configured globally.
I can, of course, do this "manually" but others may forget or may not be knowledgeable to do this on their own. I would like git to locally enforce this, rather than some upstream server, so that new commits don't accidentally get built on top of bad commits.
If no such functionality exists in git today, then I humbly ask that this feature be considered. Perhaps `pull.gpgVerify`?
Thank you for your time.