CalvinBackup/OBLITERATUS
1
0
Fork 0
mirror of https://github.com/elder-plinius/OBLITERATUS.git synced 2026-08-30 06:30:37 +02:00
Code Issues Packages Projects Releases Wiki Activity

ci: preserve signed canonical integrations

Browse Source
This commit is contained in:
Joseph Magly
2026-08-20 23:17:45 -04:00
parent 38efd3dc0a
commit 4848fea62c
4 changed files with 25 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
CONTRIBUTING.md
+7
View File
@@ -61,6 +61,13 @@ currently fingerprint
signing path. Maintainers preserve the original contributor as author when carrying
their work and keep maintainer hardening or test commits separately attributable.
Canonical integration must preserve a verifiable signature. Use an exact
fast-forward of the audited signed head, or the repository's configured merge
method after confirming that the resulting canonical commit is verified. Do not
use GitHub rebase merge: GitHub recreates the commits and can publish unsigned
canonical objects even when the pull-request head was signed. Post-merge
reconciliation must verify the commit that actually landed on `main`.
Verify your local commit before pushing:
```bash