feat(git): add pre-push hook to reject unsigned commits #148

Merged
rootiest merged 2 commits from chore/pre-push-signature-check into main 2026-09-13 00:58:16 +00:00
Showing only changes of commit 6c35dc4337 - Show all commits
+15
View File
@@ -36,6 +36,21 @@ If you're touching anything under `docs/manual/`, you'll also want `pandoc`,
(see [Documentation Pipeline](#documentation-pipeline)) — otherwise CI will
catch problems on push.
**Point your clone at the tracked git hooks.** `.githooks/pre-push` rejects a
push carrying an unsigned or bad-signature commit — GUI git clients (Gittyup
included) commonly commit via libgit2 and skip `commit.gpgsign` silently.
This isn't wired up automatically (most users of this config never push to
this repo), so opt in once per clone:
```fish
git config core.hooksPath .githooks
```
Bypass a specific push with `git push --no-verify` if you have a genuine
reason to. See [Secrets & Machine-Specific
Config](#secrets--machine-specific-config) if you'd rather set this from
your own `local.fish` than type it by hand.
## Issues
Issues live on the Gitea repo. Three templates cover the common cases, each