ben-grande/qusal

dotfiles git configuration with qusal

Closed this issue · 2 comments

Commitment

I confirm that I have read the following resources:

Question

DISCLAIMER: not sure whether this fits better under this or the dotfiles repo. Happy to move it where appropriate.

I am using the combination of your qusal and dotfiles repos, as I find them a fantastic combo. Can you explain what the intended setup is for the use of gpg functionality with git is?

.

On the git config, search for the following keywords: sign, verify, gpg (beware of false positives such as signOff and signatre, signatureFile).

The intended workflow is:

  • sign all commits andl tags (auto)
  • sign pushes if the remote supports it (auto)
  • verify merge signature before merge occurs (auto)
  • aliases to verify commits and tags (manual, requires user explicit action to call the alias)

thanks - will try it out!