A node module and CLI tool to perform multi-file signed commits on a GitHub repo through their GraphQL APIs. Good for CI/CD environments.

Repository Settings

pirafrank/github-commit-sign
Webhooks
Webhooks allow external services to be notified when certain events happen in your repository.

Used to validate webhook payloads for security.

Any Git push to the repository

Pull request opened, closed, or synchronized

Issue opened, edited, closed, etc.

Commit or diff commented on

Code scanning alerts