title | intro | versions | type | topics | redirect_from | shortTitle | ||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
Managing GPG verification for GitHub Codespaces |
You can allow {% data variables.product.company_short %} to automatically use GPG to sign commits you make in your codespaces, so other people can be confident that the changes come from a trusted source. |
|
how_to |
|
|
GPG verification |
After you enable GPG verification, {% data variables.product.company_short %} will automatically sign commits you make in {% data variables.product.prodname_github_codespaces %}, and the commits will have a verified status on {% data variables.product.product_name %}. For more information about {% data variables.product.product_name %}-signed commits, see "AUTOTITLE."
By default, GPG verification is disabled for codespaces you create. If you enable GPG verification, your commits are signed in repositories that you trust.
{% data reusables.codespaces.settings-sync-and-gpg %}
For more information about managing your preferences for Settings Sync, see "AUTOTITLE."
{% note %}
Note: If you have linked a dotfiles repository with {% data variables.product.prodname_github_codespaces %}, the Git configuration in your dotfiles may conflict with the configuration that {% data variables.product.prodname_github_codespaces %} requires to sign commits. For more information, see "AUTOTITLE."
{% endnote %}
{% data reusables.user-settings.access_settings %} {% data reusables.user-settings.codespaces-tab %}
- On the page that's displayed, under "GPG verification," enable or disable GPG verification by selecting or deselecting Enable. {% data reusables.codespaces.trusted-repos-step %}
{% data reusables.codespaces.gpg-in-active-codespaces %}