Open Bug 1540282 Opened 5 years ago Updated 2 years ago

Consider requiring Github commits to be gpg signed

Categories

(Firefox for iOS :: Build & Test, enhancement, P3)

Other
iOS
enhancement

Tracking

()

Tracking Status
fxios + ---

People

(Reporter: garvan, Unassigned)

Details

Mozilla has recommended guidelines for Github repo administration, one such guideline is to require signed commits to release branches/master:

https://wiki.mozilla.org/GitHub/Repository_Security

https://wiki.mozilla.org/GitHub/Repository_Security/Problems_and_Options#Problem:_Needing_to_setup_GPG_for_use_on_GitHub_might_dissuade_contributors

Summary: Github commits must be gpg signed → Consider requiring Github commits to be gpg signed
Priority: -- → P3
Severity: normal → S3
You need to log in before you can comment on or make changes to this bug.