Skip to main content
This guide explains how to set up SSH key-based commit signing on Paradime, which enhances the security and verification of your Git commits.

Why Sign Your Commits?

Signing your commits verifies that you are the author of your code changes and helps maintain the integrity of your codebase by preventing commit spoofing.
Prerequisites
  • Paradime IDE access
  • Git repository initialized in your Paradime workspace
  • GitHub account (for adding your signing key)

Setup Instructions

Step 1: Create the Setup Script

In your Paradime IDE, create a new file called setup_git_signed_commits.sh with the following content:

Step 2: Make the Script Executable

Open your Paradime terminal and run the following command to make the script executable:

Step 3: Run the Setup Script

Execute the script by running:
When prompted, enter a comment for your key (typically your name and email address).

Step 4: Add Your Signing Key to GitHub

  1. Copy the public key that is displayed in the terminal output
  2. Go to your GitHub account settings: https://github.com/settings/keys
  3. Click “New SSH key”
  4. Choose “Signing Key” as the key type
  5. Paste your public key in the provided field
  6. Give your key a descriptive title
  7. Click “Add SSH key”

Step 5: Verification

Your setup is now complete! Every new commit you make in this repository will be automatically signed with your SSH key. You can verify a signed commit by viewing it on GitHub, where you should see a “Verified” badge next to properly signed commits.