/technologies/security/b/blog/posts/git-sign-your-commits-with-a-certificateWhen you&#39;re working on open source projects, they sometimes ask you to sign your commits.That&#39;s the common way to confirm that you agree with the software license and development rules. There are different ways to to this. By adding a co...en-USTelligent Community 12https://community.element14.com/technologies/security/b/blog/posts/git-sign-your-commits-with-a-certificateSun, 12 Dec 2021 20:26:32 GMT93d5dcb4-84c2-446f-b2cb-99731719e767:f0133c3d-8bfa-446d-b780-c35a8b8cde8eJan Cumps0<p>Heads-up: if you&#39;re using GitLab, it works there too:</p> <p><img src="/resized-image/__size/1280x720/__key/commentfiles/f7d226abd59f475c9d224a79e3f0ec07-f0133c3d-8bfa-446d-b780-c35a8b8cde8e/pastedimage1639340770729v1.png" alt=" " /></p><img src="https://community.element14.com/aggbug?PostID=22360&AppID=67&AppType=Weblog&ContentType=0" width="1" height="1">https://community.element14.com/technologies/security/b/blog/posts/git-sign-your-commits-with-a-certificateFri, 10 Dec 2021 14:51:36 GMT93d5dcb4-84c2-446f-b2cb-99731719e767:f0133c3d-8bfa-446d-b780-c35a8b8cde8eJan Cumps0<p>Here is an example that show how this can be used in a fully automated flow:</p> <p>I submitted a pull request for Microsoft Azure (<a href="https://github.com/Azure/azure-iot-device-ecosystem/pull/729" rel="noopener noreferrer" target="_blank">link</a>).<br />They validate if I signed my commits, and also validate if I have signed the CLA (Contribution License Agreement)</p> <p><img src="/resized-image/__size/1280x720/__key/commentfiles/f7d226abd59f475c9d224a79e3f0ec07-f0133c3d-8bfa-446d-b780-c35a8b8cde8e/pastedimage1639147673325v1.png" alt=" " /></p> <p></p> <p>If I don&#39;t do that, the pull request workflow will keep my pull request pending.</p><img src="https://community.element14.com/aggbug?PostID=22360&AppID=67&AppType=Weblog&ContentType=0" width="1" height="1">