From: John Keeping <john@keeping.me.uk>
Date: Fri, 16 Jan 2015 19:59:50 GMT
Subject: Re: RFC: update hook for GPG signed submission on secured branches
Message-ID: <20150116195950.GK26383@serenity.lan>
In-Reply-To: <BD3DE7B299FE458287DC8C829CEADEC2@black>

On Fri, Jan 16, 2015 at 02:47:25PM -0500, Jason Pyeron wrote:
> > I am not sure if the design of this, to require signature only on
> > the tip commit, is sound.  That is not a -bug- in the script,
> > though.
> 
> It is to handle the "all my devs worked on this, they do ________
> GPG", so as long as the tip os signed, it is an implicit I am
> responsible for what is submitted.

Isn't this an ideal scenario for using the signed pushes introduced in
Git 2.2.0?