Signed Git commits protect software supply chains
A new open source project allows software developers and DevOPs to digitally sign Git commits easily and securely. A Git commit is a version control system that tracks changes in software projects. A Git commit is a snapshot that captures changes at a specific point in time, accompanied by a short report describing the adjustments. Keeper and The Migus Group developers are collaborating to develop an open source solution for signing Git commits with SSH keys stored in a user's Keeper Vault. The integration provides developers with a secure and encrypted repository for their SSH keys and eliminates the…