I'd like to verify in a workflow that all git commits to my repo are signed in a workflow, but if I run git log --show-signature from a workflow, it does not show signatures. Can this be resolved?
Something went wrong. Try again.
Monorepo for Tangled tangled.org
Something went wrong. Try again.
spindle: cloned repos do not show verified commits as such #4678
Closed 
joshghiloni.me
joshghiloni.me Closed opened by joshghiloni.me
joshghiloni.me 
there is nothing exclusive to tangled/spindles regarding commit signatures, if these signatures are present on the git remote, they will also be present on the spindle when cloned in the git object itself. i believe this might be an issue with how git log --show-signature works. you can check if the signature is included in the commit object using git cat-file -p .