mirror of
https://github.com/linuxserver/cstate.git
synced 2026-01-19 19:34:34 +08:00
15 lines
4.4 KiB
XML
15 lines
4.4 KiB
XML
<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><link rel="alternate" type="text/html" href="https://info.linuxserver.io"/><title>github on Info :: LinuxServer.io</title><link>https://info.linuxserver.io/affected/github/</link><description>History</description><generator>github.com/cstate</generator><language>en</language><lastBuildDate>2024-08-18T23:00:00+00:00</lastBuildDate><updated>2024-08-18T23:00:00+00:00</updated><atom:link href="https://info.linuxserver.io/affected/github/index.xml" rel="self" type="application/rss+xml"/><item><title>Git Commit Signing For Linuxserver CI</title><link>https://info.linuxserver.io/issues/2024-08-18-commit-signing/</link><pubDate>Sun, 18 Aug 2024 23:00:00 +0000</pubDate><guid>https://info.linuxserver.io/issues/2024-08-18-commit-signing/</guid><category/><description>Effective immediately we have started signing all of the git commits created by our CI account (I know, we should have done this a while ago but there were logistical issues that made it difficult). This means you can verify that all commits to our repos were, in fact, authored by us and that any commits to other random repos, were not. Most of the individuals who commit to our repos already sign their commits, but we&rsquo;re working on getting everyone else into that position in the near future.</description><content type="html"><p>Effective immediately we have started signing all of the git commits created by our CI account (I know, we should have done this a while ago but there were logistical issues that made it difficult). This means you can verify that all commits to our repos were, in fact, authored by us and that any commits to other random repos, were not. Most of the individuals who commit to our repos already sign their commits, but we&rsquo;re working on getting everyone else into that position in the near future. If you&rsquo;re contributing code via PR, we&rsquo;d appreciate it if you could sign your commits too.</p>
|
|
<p>Our public key is <code>ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDHjFYCmz+jSuS/tXs/KTtnLlaZhXTzJ/6EM9Ra9hSZB</code> and the key signature is <code>SHA256:fh11rWL5oCDRdg8ER4TS1r8mdK7lLmwPcJouqXZgNko</code>. The email associated with the commits is ci@<!-- raw HTML omitted -->linuxserver<!-- raw HTML omitted -->.io.</p>
|
|
<p>In GitHub this can be seen as a Verified badge against the commit:</p>
|
|
<p><img src="https://info.linuxserver.io/img/github-commit-signing.png" alt="GitHub Commit Signing"></p>
|
|
<p>In GitLab it will similarly show a Verified badge against the commit. Unfortunately, because we use Gitlab as a mirror of GitHub it will show commits authored by GitHub on behalf of users - such as via the web UI - as Unverified:</p>
|
|
<p><img src="https://info.linuxserver.io/img/gitlab-commit-signing.png" alt="Gitlab Commit Signing"></p>
|
|
<p>And on the command line a <code>git log --show-signature</code> will output signing data with each signed commit. Note that you will need to add our email and public key to your git allowedSignersFile for it to show as a Good signature:</p>
|
|
<div class="highlight"><pre tabindex="0" style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-shell" data-lang="shell"><span style="display:flex;"><span>$ git log --show-signature
|
|
</span></span><span style="display:flex;"><span>commit c76fe36fd9146817c3ec362a371e31f0f76e90c7 <span style="color:#f92672">(</span>HEAD -&gt; master, tag: 5.8.3.8933-ls233, origin/master, origin/HEAD<span style="color:#f92672">)</span>
|
|
</span></span><span style="display:flex;"><span>Good <span style="color:#e6db74">&#34;git&#34;</span> signature <span style="color:#66d9ef">for</span> ci@linuxserver.io with ED25519 key SHA256:fh11rWL5oCDRdg8ER4TS1r8mdK7lLmwPcJouqXZgNko
|
|
</span></span><span style="display:flex;"><span>Author: LinuxServer-CI &lt;ci@linuxserver.io&gt;
|
|
</span></span><span style="display:flex;"><span>Date: Sun Aug <span style="color:#ae81ff">18</span> 16:58:40 <span style="color:#ae81ff">2024</span> +0000
|
|
</span></span><span style="display:flex;"><span>
|
|
</span></span><span style="display:flex;"><span> Bot Updating Templated Files
|
|
</span></span></code></pre></div></content></item></channel></rss> |