tickets #169426
openCommit signing for Weblate
100%
Description
Hello,
https://l10n.opensuse.org/ is not signing the Git commits as of today, which is considered a good practice to ensure that the commit author can be verified (in this case it would be the automation).
This would allow repositories with translations coming from weblate, to enforce commit signing, which is now possible right now. Otherwise it can't be enforced as it's only allowed for everyone or for nobody (otherwise people can't prepare ports that include commits that are not signed, as those from weblate are).
Weblate has this functionality: https://docs.weblate.org/en/latest/admin/config.html#std-setting-WEBLATE_GPG_IDENTITY
It means providing a private key, and adding it to the configuration, and of course then adding the public part to the user submitting to GitHub, Gitlab, etc.
While I understand l10n.opensuse.org is now not managed by openSUSE, maybe you can talk to their administrators?
I sent them a message 3-4 weeks ago via https://l10n.opensuse.org/contact/, but so far I didn't receive feedback (no clue if the form even works, it didn't send me a copy of the message).
Thanks!