[PATCH v5 3/5] merge/pull: verify GPG signatures of commits being merged

When --verify-signatures is specified on the command-line of git-merge or git-pull, check whether the commits being merged have good gpg signatures and abort the merge in case they do not. This allows e.g. auto-deployment from untrusted repo hosts. Signed-off-by: Sebastian Götte

Re: [PATCH v5 3/5] merge/pull: verify GPG signatures of commits being merged

Sebastian Götte ja...@physik.tu-berlin.de writes: + OPT_BOOLEAN(0, verify-signatures, verify_signatures, + N_(Verify that the named commit has a valid GPG signature)), Please use OPT_BOOL() in new code. Verifying existing OPT_BOOLEAN() can safely converted to OPT_BOOL() and