Verified75% confidenceFactExact time
For CI bot accounts such as github-actions[bot], GitHub signs the automatically generated commits using its own hosted GPG key.
3
Sources
75%
Confidence
Long-term
Relevance
10/8/2026
First Seen
Sources
Related Entities
Related Claims
VerifiedGitHub automatically attaches a verified signature to commits created through its web interface or specific integrations, and displays a 'Verified' badge in the interface.77% similarUnverifiedgithub-actions is GitHub's official CI bot account, and a repository can be configured to automatically build and publish to npm when a tag is pushed.77% similarVerifiedBoth SSH keys and GPG keys can be used to sign GitHub commits; GitHub binds public keys to accounts to associate code changes with contributor identities.76% similarPartially VerifiedGit supports cryptographic signing of commits and tags using GPG, and the signature binds the commit content to the signer's private key.75% similarUnverifiedGitBot runs locally and uses the user's already-authenticated accounts and credentials, requiring no additional authentication setup.73% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/988641API
curl https://kongchang.com/api/v1/knowledge/claims/988641MCP
get_claim(id=988641)