How do I complain when a commit/merge/tag/etc aren't signed? Ie, everything should be signed and I'd like a hook that complains loudly if something isn't signed (or if a signature isn't verifiable).
Also, how do I default to signing everything?
Junio C HamanoRe: verify signature hook
shawn wilson <ag4ve.us@gmail.com> writes:
> How do I complain when a commit/merge/tag/etc aren't signed?
At which point? A natural place would be to detect this just before accepting a suspicious history being pushed in pre-receive hook, I think.
Re: verify signature hook
Apparently GMail for Android only sends HTML encoded emails (and the list rightly rejected it).
On Mon, Apr 29, 2013 at 4:31 PM, shawn wilson <ag4ve.us@gmail.com> wrote:
Show 14 quoted lines
> > On Apr 29, 2013 12:42 PM, "Junio C Hamano" <gitster@pobox.com> wrote: >> >> shawn wilson <ag4ve.us@gmail.com> writes: >> >> > How do I complain when a commit/merge/tag/etc aren't signed? >> >> At which point? A natural place would be to detect this just before >> accepting a suspicious history being pushed in pre-receive hook, I >> think. > > I was thinking of adding it to a post hook I've got that emails a report > but > I'm not opposed to just stopping it from happening.