Felipe M.
54de7ea4a8
Aliases: co for checkout, fp to fetch all remotes with prune then fast-forward-only pull. Signing uses an SSH key held in 1Password rather than GPG. 1Password has no GPG agent and ships only op-ssh-sign, so SSH signing is what it actually supports; git has handled it since 2.34 and the Forgejo instance verifies it. The private key never touches disk -- op-ssh-sign talks to the desktop app over its agent socket. Only the public half is committed. The signing block is emitted only where the signer binary exists, checked with stat at apply time and resolved per-OS. A machine with just the 1Password CLI gets signing off rather than a git that fails on every commit, and no per-host field has to be kept in sync. allowed_signers is managed too, so `git log --show-signature` can verify our own commits locally instead of reporting an unknown key. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
3 lines
195 B
Go Template
3 lines
195 B
Go Template
# Maps identities to signing keys so `git log --show-signature` can verify
|
|
# locally. Generated by chezmoi from home/dot_config/git/allowed_signers.tmpl.
|
|
{{ .user.email }} {{ .user.signingkey }}
|