Added GPG signing for my Git commits via the amazing oct-git (https://crates.io/crates/openpgp-card-tool-git) rust-implementation to my git configuration:
~ ❯ git config list
...
user.signingkey=f797370e9131bb04d2d339304a64ef24ab2463ea
gpg.program=/home/chofstede/.cargo/bin/oct-git
Now the GPG key on my Nitrokey hardware security token is used to sign commits, ensuring authenticity and integrity, yay 🙂
Example commit on Codeberg: https://codeberg.org/Larvitz/gists/commit/df87e8ca18bcaf603baa13c8c150a9950c6c2b67
Example commit on Github: https://github.com/chofstede/jmore/commit/8758c31cb64a4d0b06d6859d1247a197272226a7
#security #git #github #codeberg #rust #gpg Codeberg (npub1fh7…ee83) Heiko (npub1ugf…hya8)