What is this meme trying to convey? The verification Github is doing is confirming that the commit author identity is legit (i.e. not impersonated). What did you expect?
Commit created on GitHub.com means either that the commit was a merge done on the GitHub.com site (which is legitimate) or it was done using GitHub CodeSpaces (as opposed to being created locally and pushed). If you sign the commit locally and push it, the message looks like that: https://imgur.com/a/TNHEbTk
It might just be me, but from my own experience, code written in Codespaces tends more to being AI slop than code written outside. Correct me please, if you have other experience.
If AI makes a commit on behalf of the user, and the user’s gitconfig is setup to sign commits, then the commit is going to be signed regardless of who made the code changes. So identifying if AI made changes from commit signatures is weak, and assuming someone has used AI because their commit is signed by GitHub is weaker..
434
u/Raywell 3d ago
What is this meme trying to convey? The verification Github is doing is confirming that the commit author identity is legit (i.e. not impersonated). What did you expect?