Security

In this article, I’m going to cover the complete setup for GPG commit signing on Windows, including the wrapper script solution that actually works. I really love seeing those green “Verified” badges next to commits on GitHub. There’s something satisfying about cryptographic proof that your code actually came from you. But if you’ve tried setting up GPG commit signing on Windows, you’ve probably run into the same frustrating issues I did - Git can’t find your GPG key even though gpg --list-keys works perfectly fine in your terminal. ...

I’ve put in some effort in recent months to remove secrets from multiple legacy code bases. That was the easy part, the though part is to change culture to prevent new secrets from leaking into the codebase in the future. Luckily there are tools to help out with that: Gitleaks was a cool finding. It helps to find secrets before you commit them using different regular expressions that you can also extend. ...