Verified80% confidenceFactExact time
GitHub automatically attaches a verified signature to commits created through its web interface or specific integrations, and displays a 'Verified' badge in the interface.
4
Sources
80%
Confidence
Long-term
Relevance
10/12/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedFor CI bot accounts such as github-actions[bot], GitHub signs the automatically generated commits using its own hosted GPG key.77% similarVerifiedThis release record was completed by a GitHub Actions automated workflow and carries an official GitHub verified signature (Verified).77% similarUnverifiedGitHub attestation allows users to verify, through commands such as gh attestation verify, that a certain npm package was indeed built from the specified repository and commit.76% similarUnverifiedWhen verifying a commit signature, GitHub compares the signature in the commit with the public key bound to the committer's account, and only shows Verified if the two match; this mechanism guarantees that the commit comes from that account, not that the code content is correct.76% similarUnverifiedGitHub等平台已经开始讨论为AI生成的提交引入专属标识符75% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1005902API
curl https://kongchang.com/api/v1/knowledge/claims/1005902MCP
get_claim(id=1005902)