Provide a default Git Committer Name and Email with GPGSigning
This patches a security vulnerability where commits signed by gitaly are misleadingly verified as signed by the commit author, instead of the gitlab instance. Changelog: changed
Showing
- internal/git/localrepo/commit.go 1 addition, 1 deletioninternal/git/localrepo/commit.go
- internal/git/localrepo/commit_test.go 3 additions, 1 deletioninternal/git/localrepo/commit_test.go
- internal/gitaly/config/config.go 8 additions, 0 deletionsinternal/gitaly/config/config.go
- internal/gitaly/config/config_test.go 17 additions, 0 deletionsinternal/gitaly/config/config_test.go
- internal/gitaly/service/commit/get_commit_signatures_test.go 5 additions, 1 deletioninternal/gitaly/service/commit/get_commit_signatures_test.go
- internal/testhelper/testcfg/gitaly.go 3 additions, 0 deletionsinternal/testhelper/testcfg/gitaly.go
Please register or sign in to comment