That competition between gitlab and github is starting to give good results: 3 weeks in a row with news from both, each time with long-awaited features.
If this doesn't show that competition is good, I don't know what else could!
If this doesn't show that competition is good, I don't know what else could!
The part that GitHub implemented (uploading keys to the site, displaying verified signed commits in the UI) looks like it is both.
Configuring a project to only accept signed commits in various ways looks to be EE only.
https://help.riseup.net/en/security/message-security/openpgp...