dullbananas (Joseph Silva)@lemmy.ca to Free and Open Source Software@beehaw.orgEnglish · 10 days agoWhat alternative to GnuPG has a compatible interface (for use by Git) and does not leave behind an active lock (like pubring.db.lock) when something crashes?message-squaremessage-square3fedilinkarrow-up115arrow-down10file-text
arrow-up115arrow-down1message-squareWhat alternative to GnuPG has a compatible interface (for use by Git) and does not leave behind an active lock (like pubring.db.lock) when something crashes?dullbananas (Joseph Silva)@lemmy.ca to Free and Open Source Software@beehaw.orgEnglish · 10 days agomessage-square3fedilinkfile-text
minus-squaresemi [he/him]@lemmy.mllinkfedilinkarrow-up7·edit-210 days agoYou can sign git commits using SSH keys, including the one you use to connect to GitHub/GitLab/Codeberg. These sites also support verifying the signature.
minus-squareScott@lem.free.aslinkfedilinkEnglisharrow-up7·edit-210 days agoCombine that with Bitwarden running as the SSH Agent [1] and you’ve got yourself a decent, secure way to sign commits, etc. [1] https://bitwarden.com/help/ssh-agent/
minus-squareMatt The Horwood@lemmy.horwood.cloudlinkfedilinkEnglisharrow-up4arrow-down2·10 days agoOr 1password if that’s your bag, I use 1password at work and bitwarden at home
You can sign git commits using SSH keys, including the one you use to connect to GitHub/GitLab/Codeberg. These sites also support verifying the signature.
Combine that with Bitwarden running as the SSH Agent [1] and you’ve got yourself a decent, secure way to sign commits, etc.
[1] https://bitwarden.com/help/ssh-agent/
Or 1password if that’s your bag, I use 1password at work and bitwarden at home