GitHub Signatures in Gitea
##########################

:category:  Misc
:date:      2019-11-15 02:16 +0200
:tags:      github, gitea, gpg, lifehack

A small lifehack for the Gitea owners.
As you may know, `GitHub signs commits done with its web interface with its GPG key`__.
These commits may end up on your Gitea server.
It looks rather unconvincing:

.. TEASER_END

.. figure:: /images/misc/gitea-github/gitea_list_unknown.png
   :width: 392px

   Commit list
.. figure:: /images/misc/gitea-github/gitea_unknown.png
   :width: 872px

   Commit page

.. __: https://help.github.com/en/github/authenticating-to-github/about-commit-signature-verification

Luckily it is fixable by a simple lifehack:

1. Register user 'github'
2. Log in with it and optionally set up a profile
3. Add the web flow GPG key: https://github.com/web-flow.gpg
4. Add ``noreply@github.com`` to the account emails
5. Mind the security and disable sign-in for this account

The signatures will look much better:

.. figure:: /images/misc/gitea-github/gitea_list_signed.png
   :width: 392px

   Commit list
.. figure:: /images/misc/gitea-github/gitea_signed.png
   :width: 872px

   Commit page