ppkarwasz commented on PR #422:
URL: 
https://github.com/apache/commons-release-plugin/pull/422#issuecomment-4458025218

   Some commits are pushed directly, others are created by GitHub's `web-flow` 
user.
   
   By running a workflow at each commit, you can generate tamper-resistant 
proof of who committed something and when, possibly with the results of an 
associated PR. Neither Git nor GPG have tamper-resistant timestamps: you 
basically put the date you want.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to