How to stop my commits being signed with GitHub's key?

[nc7s]

Select Topic Area

Question

Body

I've seen my commits signed with GitHub's key (B5690EEEBB952194) in multiple occurrences, namely, web edits, and PR merges.

I don't object to the former; it seems quite hard, if not impossible, to implement commit signing with one's own key on a webpage, and using web edit more or less accepts that.

However, the commits in my PRs are signed with my own keys, being signed again with GitHub' key defeats the purpose. I'd rather have them unsigned.

[RachidZahrani]

When using GitHub's web interface for editing files or merging pull requests, commits are often signed with GitHub's key (B5690EEEBB952194). This is a measure taken by GitHub to ensure the authenticity and integrity of these commits, but it can indeed be an issue if you prefer your commits to be signed with your own key.

[ADEMOLA200]

If you prefer to sign commits with your own GPG key, you would need to make the commits locally on your machine and then push them to the repository. Here’s a brief overview of how to sign commits with your own GPG key:

1. Generate a GPG Key: If you don't already have a GPG key, you'll need to generate one. You can do this with the following command:

   gpg --full-generate-key

2. Add Your GPG Key to GitHub: Export your GPG public key and add it to your GitHub account.

   gpg --armor --export YOUR_KEY_ID

   Copy the output and add it to GitHub under Settings > SSH and GPG keys > New GPG key.

3. Configure Git to Use Your GPG Key: Set your GPG key for signing commits in your local Git configuration.

   git config --global user.signingkey YOUR_KEY_ID

4. Sign Your Commits: When making commits, use the -S option to sign them.

   git commit -S -m "Your commit message"

By following these steps, you can ensure that your commits are signed with your own GPG key, even if GitHub’s web interface is used for other purposes.

[github-actions[bot]]

🕒 Discussion Activity Reminder 🕒

This Discussion has been labeled as dormant by an automated system for having no activity in the last 60 days. Please consider one the following actions:

1️⃣ Close as Out of Date: If the topic is no longer relevant, close the Discussion as out of date at the bottom of the page.

2️⃣ Provide More Information: Share additional details or context — or let the community know if you've found a solution on your own.

3️⃣ Mark a Reply as Answer: If your question has been answered by a reply, mark the most helpful reply as the solution.

Note: This dormant notification will only apply to Discussions with the Question label. To learn more, see our recent announcement.

Thank you for helping bring this Discussion to a resolution! 💬

[nc7s]

No activity means no satisfying answer has been given, but it's not necessarily automatically out of date.

[github-actions[bot]]

🕒 Discussion Activity Reminder 🕒

This Discussion has been labeled as dormant by an automated system for having no activity in the last 60 days. Please consider one the following actions:

1️⃣ Close as Out of Date: If the topic is no longer relevant, close the Discussion as out of date at the bottom of the page.

2️⃣ Provide More Information: Share additional details or context — or let the community know if you've found a solution on your own.

3️⃣ Mark a Reply as Answer: If your question has been answered by a reply, mark the most helpful reply as the solution.

Note: This dormant notification will only apply to Discussions with the Question label. To learn more, see our recent announcement.

Thank you for helping bring this Discussion to a resolution! 💬

[aeharding]

There is no solution to this. I suppose that is technically an answer...

[nc7s]

Yeah. I'll open a new "ticket" asking for a solution then.