On Fri, Oct 09, 2026 at 15:23:36 -0400, Carlos O'Donell via Gcc wrote:
> * Discussed with Joseph Myers the concept of a web hook triggering
> git-mailbomb
> and passing in the key used to push along with the time in order to
> trigger
> the mailbomb email message with the additional information that
> otherwise
> is invisible. Today this is the closest we get to a transparency log.
Git supports signed pushes:
https://people.kernel.org/monsieuricon/signed-git-pushes
kernel.org also publishes a transparency log. This might be of interest
for this purpose. kernel.org's transparency log:
https://git.kernel.org/pub/scm/infra/transparency-logs/gitolite/git/1.git/
--Ben
