Option To Sign Web Interface Commits As Author And Not As System #12987

Open
opened 2025-11-02 10:27:00 -06:00 by GiteaMirror · 0 comments
Owner

Originally created by @Deadmano on GitHub (May 12, 2024).

Feature Description

Currently if you make any web-based commits, such as merging a pull request, the commit shows up as being authored by the user but signed by Gitea as per the GPG key installed during the Gitea configuration phase.

What I'd like is to be able to sign all web-based activities with my own signing key that can be verified via user settings.

Is there a reason why that isn't an option if we have steps in place to verify the user is who they claim to be, such as 2FA?

Configuring the system to use my signing key is not an option since there are others who share the service so it would appear as if though I was signing their web commits.

Screenshots

No response

Originally created by @Deadmano on GitHub (May 12, 2024). ### Feature Description Currently if you make any web-based commits, such as merging a pull request, the commit shows up as being authored by the user but signed by Gitea as per the GPG key installed during the Gitea configuration phase. What I'd like is to be able to sign all web-based activities with my own signing key that can be verified via user settings. Is there a reason why that isn't an option if we have steps in place to verify the user is who they claim to be, such as 2FA? Configuring the system to use my signing key is not an option since there are others who share the service so it would appear as if though I was signing their web commits. ### Screenshots _No response_
GiteaMirror added the type/proposal label 2025-11-02 10:27:00 -06:00
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github-starred/gitea#12987