Alternative to GPG
You can sign git commits using SSH keys, including the one you use to connect to GitHub/GitLab/Codeberg. These sites also support verifying the signature.
Combine that with Bitwarden running as the SSH Agent [1] and you’ve got yourself a decent, secure way to sign commits, etc.
Or 1password if that’s your bag, I use 1password at work and bitwarden at home
Wrong community? Or shill?
And that’s not the only difference that - in my humble opinion - makes bitwarden stand out sky high against this proprietary SAAS shit.
was just pointing out that 1password has an SSH agent, not that you should use it.
I would always recommend bitwarden, as its so cheap or free if you self host it. also vaultwarden is the lighter option
At the very least you should proactively point out that you’re recommending closed source, proprietary and paid software on a FOSS community, in the future.
Especially with password managers the SAAS closed source part is extremely relevant. I’d never entrust mine to that, let alone recommend it to others. Linux version with integrated ssh agent be damned.
