Files
computer-playbook/scripts/git
kevinveenbirkenbachandClaude Opus 4.8 bc047de312 feat(git): gate merges on signed incoming commits
A merge commit bypassed every signature check: test-signed only inspects
HEAD and the pre-commit hook does not run for merge commits. Add
scripts/git/assert_merge_signed.sh, which fails when any commit the merge
brings in (HEAD..MERGE_HEAD) reports %G? status N, wire it up as
make test-merge-signed, and register it as a pre-merge-commit hook so
pre-commit install now also installs that hook type.

Fast-forward merges create no commit and skip the hook (use --no-ff to
gate them); conflicted merges fall back to the regular pre-commit and
pre-push gates.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-07-11 03:26:12 +02:00
..

Git Workflow Helpers 🔐

This directory holds the Git workflow helper scripts. These helpers own the Git operations that the Claude sandbox denies, so they run under the operator's control with access to ~/.gnupg and interactive pinentry. For the canonical command index, see make.md.