Skip to content

Check signed Web commits authorship on push

Igor Drozdov requested to merge id-check-signed-commits-authorship into master

What does this MR do and why?

Check signed Web commits authorship on push

A signed commit with a customized author is invalid, so let's introduce a check that catches this misbehavior.

We allow setting an author for commits via Commits API. We may introduce sign option to mitigate it in the future.

Related issue: Signed commits created via REST API should not ... (#456481 - closed)

Edited by Igor Drozdov

Merge request reports