Project

General

Profile

Actions

tickets #169426

open

Commit signing for Weblate

Added by juliogonzalezgil 18 days ago. Updated 9 days ago.

Status:
New
Priority:
Normal
Category:
Weblate
Target version:
-
Start date:
2024-11-06
Due date:
% Done:

100%

Estimated time:

Description

Hello,

https://l10n.opensuse.org/ is not signing the Git commits as of today, which is considered a good practice to ensure that the commit author can be verified (in this case it would be the automation).

This would allow repositories with translations coming from weblate, to enforce commit signing, which is now possible right now. Otherwise it can't be enforced as it's only allowed for everyone or for nobody (otherwise people can't prepare ports that include commits that are not signed, as those from weblate are).

Weblate has this functionality: https://docs.weblate.org/en/latest/admin/config.html#std-setting-WEBLATE_GPG_IDENTITY

It means providing a private key, and adding it to the configuration, and of course then adding the public part to the user submitting to GitHub, Gitlab, etc.

While I understand l10n.opensuse.org is now not managed by openSUSE, maybe you can talk to their administrators?

I sent them a message 3-4 weeks ago via https://l10n.opensuse.org/contact/, but so far I didn't receive feedback (no clue if the form even works, it didn't send me a copy of the message).

Thanks!


Related issues 1 (0 open1 closed)

Related to openSUSE admin - tickets #169993: I need to verify weblate-noreply@opensuse.orgResolved2024-11-15

Actions
Actions

Also available in: Atom PDF