{"action":"created","issue":{"url":"https://api.github.com/repos/education/teachers/issues/38","labels_url":"https://api.github.com/repos/education/teachers/issues/38/labels{/name}","comments_url":"https://api.github.com/repos/education/teachers/issues/38/comments","events_url":"https://api.github.com/repos/education/teachers/issues/38/events","html_url":"https://github.com/education/teachers/issues/38","id":111192441,"number":38,"title":"spoof commits","user":{"login":"Drealmer","id":1515698,"avatar_url":"https://avatars.githubusercontent.com/u/1515698?v=3","gravatar_id":"","url":"https://api.github.com/users/Drealmer","html_url":"https://github.com/Drealmer","followers_url":"https://api.github.com/users/Drealmer/followers","following_url":"https://api.github.com/users/Drealmer/following{/other_user}","gists_url":"https://api.github.com/users/Drealmer/gists{/gist_id}","starred_url":"https://api.github.com/users/Drealmer/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Drealmer/subscriptions","organizations_url":"https://api.github.com/users/Drealmer/orgs","repos_url":"https://api.github.com/users/Drealmer/repos","events_url":"https://api.github.com/users/Drealmer/events{/privacy}","received_events_url":"https://api.github.com/users/Drealmer/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":1,"created_at":"2015-10-13T14:30:41Z","updated_at":"2015-10-14T10:04:02Z","closed_at":null,"body":"Hi all,\r\n\r\nBy design, each git commit carries the email of its author, and nothing prevents you from forging a commit that pretends to be from someone else.\r\n\r\nWhen working on group projects, this might be problematic. Even if all students have the rights to modify anything, by changing their email address they can break stuff and blame it on somebody else. Now, the chances of this happening on purpose are really low, and the solution to this resides more on the social aspects of source control than on the technical ones, but still...\r\n\r\nI am wondering if I can access the \"push log\" of a github repository, in order to check who sent which commit to the server.\r\n\r\nThe other option I am aware of is signing commits with an ssh key, but I don't think it would work with the built-in git integration of visual studio we are currently using (which is really convenient because it is dead simple, so I'd like to keep it that way). And also, if the repository can't be configured to reject unsigned commits this won't help much (I have to confess I have no idea if that is possible with github).\r\n\r\nAny idea? Thanks."},"comment":{"url":"https://api.github.com/repos/education/teachers/issues/comments/147998527","html_url":"https://github.com/education/teachers/issues/38#issuecomment-147998527","issue_url":"https://api.github.com/repos/education/teachers/issues/38","id":147998527,"user":{"login":"robertmorrispainter","id":13520974,"avatar_url":"https://avatars.githubusercontent.com/u/13520974?v=3","gravatar_id":"","url":"https://api.github.com/users/robertmorrispainter","html_url":"https://github.com/robertmorrispainter","followers_url":"https://api.github.com/users/robertmorrispainter/followers","following_url":"https://api.github.com/users/robertmorrispainter/following{/other_user}","gists_url":"https://api.github.com/users/robertmorrispainter/gists{/gist_id}","starred_url":"https://api.github.com/users/robertmorrispainter/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/robertmorrispainter/subscriptions","organizations_url":"https://api.github.com/users/robertmorrispainter/orgs","repos_url":"https://api.github.com/users/robertmorrispainter/repos","events_url":"https://api.github.com/users/robertmorrispainter/events{/privacy}","received_events_url":"https://api.github.com/users/robertmorrispainter/received_events","type":"User","site_admin":false},"created_at":"2015-10-14T10:04:02Z","updated_at":"2015-10-14T10:04:02Z","body":"Block chain technology (Bitcoin) interests me for this very reason, but I haven`t had time to delve in yet.\r\nhttps://www.hastac.org/blogs/colemoore/2015/03/10/block-chain-futurism"}}