Hacker News new | ask | show | jobs
by nwjsmith 2009 days ago
Is it possible to use Sequoia to sign Git commits?
2 comments

It would be great if that were possible. Git commit signing is something that I would love to see be more commonplace, since it is a key part of a secured code supply chain. At my workplace I lead a project to make commit signing mandatory on our git repos, which I wrote about here: https://eos.arista.com/commit-signing-with-git-at-enterprise... .

One of the painful aspects of this was using the gpg tools. They are products of an earlier age and don't display helpful error messages, nor do they display easy to parse messages. I realize that Sequoia doesn't currently have a JSON API, but it looks like one is planned for the future, so that it two thumbs up from me.

You could try git config gpg.program=sq and see if it works. I don't know if the arguments are too different though.