3⃣ Third package is #gitsign. gitsign allows you to sign your commit messages by using
@projectsigstore
public-good services with a keyless approach. Now, I'm one o the maintainers of that project in #nixOS!
➡️nix-env -iA nixpkgs.gitsign

f you missed the event organized by @chainguard_dev yesterday about #gitsign, #cosign, #tektoncd, and #chains, don't worry; you can still watch it on demand from the Crowdcast platform 👇 Thx to @strongjz for a fantastic talk 👏
https://www.crowdcast.io/c/software-signing

I've saved my spot for a fantastic event by @strongjz about signing images with @sigstore via @tektoncd chains + commits with #gitsign! 😵‍💫 Do not forget to save your spot to not miss that event organized by @chainguard_dev 👇
https://www.crowdcast.io/c/software-signing

Improve Open Source Project Resilience: Erika Heidi explains how to start using keyless signing with Gitsign https://www.fosslife.org/start-signing-your-commits-gitsign #OpenSource #FOSS #GitHub #Gitsign #commits #SoftwareDevelopment #KeylessSigning

There's #GitSign also as a simplified version of GPG keys which you can use for signing commits

https://blog.sigstore.dev/introducing-gitsign-9fd3f1b682aa

https://github.com/sigstore/gitsign