On Apr 2, 2024, at 11:15 AM, Derick Rethans <der...@php.net> wrote: > > What do y'all think about requiring GPG signed commits for the php-src > repository? > > I had a look, and this is also something we can enforce through GitHub > as well (by using branch protections).
Would this affect only direct pushes to master, or would it be required for pull requests too? I'd be worried the average drive-by contributor wouldn't have GPG signing set up.
