Re: push right for trivial commits

[Alex Vong <alexvong1995@gmail.com>]

[-- Attachment #1: Type: text/plain, Size: 976 bytes --]

Leo Famulari <leo@famulari.name> writes:

> On Thu, Nov 22, 2018 at 04:07:33AM +0800, Alex Vong wrote:
>> I think ECC key works with commit signing precisely because commit
>> signing simply requires Savannah to store the key. However, for
>> functionalities provided by Savannah (e.g. sending email to your address
>> encrypted with your ECC public key), it wouldn't work (as mentioned in
>> <https://savannah.gnu.org/support/?109583>).
>
> To clarify, Savannah doesn't require you to store any key at all in
> order to sign Git commits. I think that Savannah accounts don't
> integrate with Git at all; they simply offer hosted Git repositories,
> and commit signing is a feature of Git.
>
> We require Guix contributors to upload their keys to their Savannah
> account so that there is an authoritative source of signing keys.

I see, so it's a guix policy rather than a technical
requirement. Indeed, we can download the key from
<https://savannah.gnu.org/users/********>

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 227 bytes --]