Ludovic Courtès 73b3f941d7 maint: Suggest ‘guix git authenticate’ for initial authentication. ... The previous recommendation, running ‘make authenticate’, was insecure because it led users to run code from the very repository they want to authenticate: https://lists.gnu.org/archive/html/guix-devel/2024-04/msg00252.html * Makefile.am (commit_v1_0_0, channel_intro_commit) (channel_intro_signer, GUIX_GIT_KEYRING, authenticate): Remove. * Makefile.am (.git/hooks/%): New target, generalization of previous ‘.git/hooks/pre-push’ target. (nodist_noinst_DATA): Add ‘.git/hooks/post-merge’. * doc/contributing.texi (Building from Git): Suggest ‘guix git authenticate’ instead of ‘make authenticate’. * etc/git/post-merge: New file. * etc/git/pre-push: Run ‘guix git authenticate’ instead of ‘make authenticate’. Reviewed-by: Maxim Cournoyer <maxim.cournoyer@gmail.com> Reported-by: Skyler Ferris <skyvine@protonmail.com> Change-Id: Ia415aa8375013d0dd095e891116f6ce841d93efd		2024-05-25 16:23:56 +02:00
..
commit-msg
gitconfig	gitconfig: b4: Automatically add 'Signed-off-by' when applying patches.	2024-01-24 10:42:41 -05:00
post-merge	maint: Suggest ‘guix git authenticate’ for initial authentication.	2024-05-25 16:23:56 +02:00
pre-push	maint: Suggest ‘guix git authenticate’ for initial authentication.	2024-05-25 16:23:56 +02:00