Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:122860
X-Original-To: internals@lists.php.net
Delivered-To: internals@lists.php.net
Received: from php-smtp4.php.net (php-smtp4.php.net [45.112.84.5])
	by qa.php.net (Postfix) with ESMTPS id C2FB01A009C
	for <internals@lists.php.net>; Tue,  2 Apr 2024 14:15:17 +0000 (UTC)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=php.net; s=mail;
	t=1712067345; bh=NrcZ1WcIepd7cjr+GQcdjw4pp9Ez9/HuDyvbvHZf8Vg=;
	h=Date:From:To:Subject:From;
	b=njCskYUrd6KiICgXMG7lxmNoiKKynjCixRu7pIRcQ4hSbwT5ocGhyRJ/v+2xqPDHL
	 u119TpeuyGhd/s0lvXnjV4BYdCvgwhxUSWLlYBRjhV1jPLsrOcBZAyXNjZiiqL8rgk
	 3RfawSgok5v9ATeqrUnNajjs6K6Rjx5QGzHsLrt0mCOPrryCdacLY5i/YdjHLyeDw9
	 Wj2nELUb8J7O+8TdNpNqH7QfK47p7aNxbjkqJyqB9PWlC1h0sBMd3ST+MQjvJmCk5C
	 oXdQXLo5NnAt9LeJX0NQVUkfwg3OnopkvkiB+vrWtCgU7QnoRPRUdzzIKN7r/fKAuK
	 WtwduZHOMdiDA==
Received: from php-smtp4.php.net (localhost [127.0.0.1])
	by php-smtp4.php.net (Postfix) with ESMTP id 83A661801D4
	for <internals@lists.php.net>; Tue,  2 Apr 2024 14:15:44 +0000 (UTC)
X-Spam-Checker-Version: SpamAssassin 4.0.0 (2022-12-13) on php-smtp4.php.net
X-Spam-Level: ***
X-Spam-Status: No, score=3.6 required=5.0 tests=BAYES_50,DKIM_SIGNED,
	DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,DMARC_MISSING,SPF_HELO_PASS,
	SPF_SOFTFAIL,T_SCC_BODY_TEXT_LINE autolearn=no autolearn_force=no
	version=4.0.0
X-Spam-Virus: No
X-Envelope-From: <derick@php.net>
Received: from xdebug.org (xdebug.org [82.113.146.227])
	by php-smtp4.php.net (Postfix) with ESMTP
	for <internals@lists.php.net>; Tue,  2 Apr 2024 14:15:44 +0000 (UTC)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=php.net; s=mail;
	t=1712067314; bh=NrcZ1WcIepd7cjr+GQcdjw4pp9Ez9/HuDyvbvHZf8Vg=;
	h=Date:From:To:Subject:From;
	b=izT8aRNGGT/WNdXVznJEf9QZHJnIBCvCLqn0I00Bh3DWTT75tXO5BPJ0bSPnf31Gi
	 +R1WwvaOhHmJcDG/k3oXWDtLq33ClzfdTBvUPb0ZniYTYJs7OXFVkfnkAMm9qvQcV8
	 pmWPkT0qMMBz9nf1WbRE/MAxIlNIfD96loDFvWqbP8r21UBG18i/XhYjF3blvFuZpd
	 YAvdcv7ps52ZPJ2uRdLE+KeFHgeHcsYqY9SVKCb/w8C9Nr3wR4SQLYFH3pCWwrWHFv
	 uKlM6KtEu7Syit2ofqXvttKhfZCnw21m0KNl0UluXGJzXAIxghHoWpSFw10wyEcGzz
	 9H+6QqYAXQcog==
Received: from localhost (localhost [IPv6:::1])
	by xdebug.org (Postfix) with ESMTPS id 967C910C0D2
	for <internals@lists.php.net>; Tue, 02 Apr 2024 15:15:14 +0100 (BST)
Date: Tue, 2 Apr 2024 15:15:14 +0100 (BST)
To: PHP Developers Mailing List <internals@lists.php.net>
Subject: [PHP-DEV] Requiring GPG Commit Signing
Message-ID: <3e988b3b-65b8-13d3-16cf-1296bfdd7ed2@php.net>
Precedence: bulk
list-help: <mailto:internals+help@lists.php.net
list-unsubscribe: <mailto:internals+unsubscribe@lists.php.net>
list-post: <mailto:internals@lists.php.net>
List-Id: internals.lists.php.net
MIME-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
From: derick@php.net (Derick Rethans)

Hi,

What do y'all think about requiring GPG signed commits for the php-src 
repository?

I had a look, and this is also something we can enforce through GitHub 
as well (by using branch protections).

cheers,
Derick


-- 
https://derickrethans.nl | https://xdebug.org | https://dram.io

Author of Xdebug. Like it? Consider supporting me: https://xdebug.org/support

mastodon: @derickr@phpc.social @xdebug@phpc.social