Threat: attacker can commit malicious code to a repository by impersonation.

Mitigation: verify commit signatures.