9 citations · 13 across the 10 of their papers we have counts for
Showing 2026Show all
2 papers · 1 filter
cs.CR2026
A Multi-Month Study of Git Commit Signing
Abubakar Sadiq Shittu, John Sadik, Scott Ruoti
Git commit signing, introduced in 2012, is one mechanism for establishing commit provenance in software supply chains, yet developer-controlled adoption remains rare and developers…
cs.SE2026
Analysis of Commit Signing on Github
Abubakar Sadiq Shittu, John Sadik, Farzin Gholamrezae +1
Securing the open-source software supply chain requires verifying the provenance of every code contribution. While end-to-end (E2E) cryptographic commit signing is widely promoted…