Skip to content

Enroll anuj@cow.fi hardware signing key - #14

Merged
glokos merged 1 commit into
mainfrom
anuj/enroll-signing-key
Aug 11, 2026
Merged

Enroll anuj@cow.fi hardware signing key#14
glokos merged 1 commit into
mainfrom
anuj/enroll-signing-key

Conversation

@ahhda

@ahhda ahhda commented Aug 11, 2026

Copy link
Copy Markdown
Contributor

Enrolls my YubiKey-backed sk-ssh-ed25519 commit-signing key, per the Hardware Commit Signing Setup doc.

  • Email: anuj@cow.fi — verified on GitHub account @ahhda
  • Fingerprint: SHA256:f6+cHWJWY+8yEWC3I5mxtaqCzSo7WKPbQFk+VZ0wrPs
  • Device: YubiKey 5C NFC, firmware 5.7.4 (FIDO2)
  • Registered on GitHub as a Signing Key, not an Authentication key

Diff is a single appended line; no existing entries reordered or edited.

Verified locally against all three checks in verify_commits.sh:

Check Result
ssh-keygen -Y verify -I anuj@cow.fi against allowed_signers pass
signature_has_touch (user-presence flag) pass — flags byte 1
Signer fingerprint is an sk- signing key on @ahhda pass

@ahhda
ahhda requested a review from a team August 11, 2026 11:46
@glokos
glokos merged commit 6359b3f into main Aug 11, 2026
3 checks passed
@glokos
glokos deleted the anuj/enroll-signing-key branch August 11, 2026 12:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants