Article: http://mikegerwitz.com/papers/git-horror-story
-
faking other user's commits is easy with --author flag
$ git commit --author='Foo Bar <[email protected]>' -m 'some commit'
-
signing commits ensures:
- someone else can't commit as myself
-
I really commited all the commits I sign