Why Sign Your Commits?
Signing your commits verifies that you are the author of your code changes and helps maintain the integrity of your codebase by preventing commit spoofing.Prerequisites
- Paradime IDE access
- Git repository initialized in your Paradime workspace
- GitHub account (for adding your signing key)
Setup Instructions
Step 1: Create the Setup Script
In your Paradime IDE, create a new file calledsetup_git_signed_commits.sh with the following content:
Step 2: Make the Script Executable
Open your Paradime terminal and run the following command to make the script executable:Step 3: Run the Setup Script
Execute the script by running:Step 4: Add Your Signing Key to GitHub
- Copy the public key that is displayed in the terminal output
- Go to your GitHub account settings: https://github.com/settings/keys
- Click “New SSH key”
- Choose “Signing Key” as the key type
- Paste your public key in the provided field
- Give your key a descriptive title
- Click “Add SSH key”