Sign your commits (without GPG Suite)
About signing your commits without GPG Suite
Ivan Elfimov, 2023-02-05, 1m (121 words)
Last time I used GPG Suite, but it became too annoying with its ads for Mail addon. So I decided to dig deeper and use console clients as much as possible.
Here is a refreshed no-bullshit-no-gpg-suite guide:
brew install gpg pinentry-mac
- install these~/.gnupg/gpg-agent.conf
- addpinentry-program /opt/homebrew/bin/pinentry-mac
(or whatever doeswhich pinentry-mac
)killall gpg-agent
- this will restart and new config will be used- generate a key (as usual)
gpg --list-keys
- chose the key you would like to use (it looks something likeABCDEFGHE123123123
)git config user.signingkey ABCDEFGHE123123123
- add the key to your repo configgit config commit.gpgsign true
- enable commits signing- commit something
git log --show-signature
- check your logs to make sure it worked