Skip to main content

Branch Protection: Require Signatures

The following rule type is available for requiring a review from code owners.

stacklok/branch_protection_require_signatures - Whether commits to the branch must be signed​

Ensure that the appropriate setting is enabled for the branch protection rule.

Commits pushed to matching branches must have verified signatures.

For more information, see https://docs.github.com/en/repositories/configuring-branches-and-merges-in-your-repository/managing-protected-branches/managing-a-branch-protection-rule

Entity​

  • repository

Type​

  • stacklok/branch_protection_require_signatures

Rule parameters​

The stacklok/branch_protection_require_signatures rule supports the following parameters:

  • branch (string) - The name of the branch to check. If left empty, the default branch will be used.

Rule definition options​

The stacklok/branch_protection_require_signatures rule supports the following options:

  • required_signatures (boolean) - Specifies whether commits to the branch must be signed.