Quantcast
Channel: Is it possible to sign Git commits on a different computer? - Information Security Stack Exchange
Browsing all 6 articles
Browse latest View live

Image may be NSFW.
Clik here to view.

Answer by Danya02 for Is it possible to sign Git commits on a different...

An option that seems the closest in spirit to what I want is to set up a gpg-agent program that would delegate the actual cryptography to a human.When you use GPG to sign things, it talks to the...

View Article


Answer by Yakk for Is it possible to sign Git commits on a different computer?

This is an attempt to turn cjs's answer into concrete steps.git log --oneline HEAD to extract the guid of the commit you want to sign.git cat-file commit COMMIT_GUID > commit.txt to generate a copy...

View Article

Answer by cjs for Is it possible to sign Git commits on a different computer?

Note that this answer takes into account your comment on an answerindicating that you cannot copy the code from the work machine you areusing (which I will call, using your personal viewpoint, the...

View Article

Answer by bmargulies for Is it possible to sign Git commits on a different...

If you are working for hire, a solution is to create a new PGP key just for the process, and sign it with your normal key, and sign the commits with that. In the event that your employer actually earns...

View Article

Answer by Yogu for Is it possible to sign Git commits on a different computer?

If you have access to the remote repository from your trusted PC,you can fetch the usigned commits on your trusted PC, sign the commits, and then push them again. This will alter the commit hashes, so...

View Article


Is it possible to sign Git commits on a different computer?

I'm doing some development work on an untrusted computer. I'd like to sign my commits I make from it, but I don't want my personal PGP key to touch this computer. Or maybe I'm using a PGP smart card...

View Article
Browsing all 6 articles
Browse latest View live