Re: [PATCH] merge/pull: verify GPG signatures of commits being merged

2013-03-22 Thread Junio C Hamano
Jonathan Nieder writes: >> git merge/pull: >> When --verify-signatures is specified on the command-line of git-merge >> or git-pull, check whether the commits being merged have good gpg >> signatures and abort the merge in case they do not. This allows e.g. >> auto-deployment from untrusted repo

Re: [PATCH] merge/pull: verify GPG signatures of commits being merged

2013-03-22 Thread Jonathan Nieder
Hi, Sebastian Götte wrote: > git merge/pull: > When --verify-signatures is specified on the command-line of git-merge > or git-pull, check whether the commits being merged have good gpg > signatures and abort the merge in case they do not. This allows e.g. > auto-deployment from untrusted repo ho

Re: [PATCH] merge/pull: verify GPG signatures of commits being merged

2013-03-22 Thread Junio C Hamano
Sebastian Götte writes: > git merge/pull: > When --verify-signatures is specified on the command-line of git-merge > or git-pull, check whether the commits being merged have good gpg > signatures and abort the merge in case they do not. This allows e.g. > auto-deployment from untrusted repo hosts

[PATCH] merge/pull: verify GPG signatures of commits being merged

2013-03-22 Thread Sebastian Götte
git merge/pull: When --verify-signatures is specified on the command-line of git-merge or git-pull, check whether the commits being merged have good gpg signatures and abort the merge in case they do not. This allows e.g. auto-deployment from untrusted repo hosts. pretty printing: Tell about an "u