alt Hacker NewsHow does the spammer get through this then?
Replies
bstsb • yesterday at 9:47 PM
they don't. it's an optional process, and many users don't change their git config to use the provided email
How does the spammer get through this then?
they don't. it's an optional process, and many users don't change their git config to use the provided email
If used/implemented correctly, they don't.
* This is an optional feature via git config, with a further GitHub setting to reject commits pushed using your personal email address.
* If the GitHub setting is disabled, some GitHub-generated commits/fixups use your personal email (e.g. squash merge in the GitHub UI).
* I use my personal email in file-level copyright headers, even if the commits use the GitHub noreply email.
* I have my personal email on my GitHub profile, visible to logged in users.