When a user works with signed commits (SSH or GPG key) and wants to verify the keys locally, one must retrieve the public key for the commit's author from GitLab's database and add it to the allowed_signers file (or the file pointed by gpg.ssh.allowedSignersFile git config) and/or the GPG local keyring, enabling the signature verification on git log --show-signatures.
For that, we must use User's API endpoint, which is also available in go-gitlab package.
When a user works with signed commits (SSH or GPG key) and wants to verify the keys locally, one must retrieve the public key for the commit's author from GitLab's database and add it to the
allowed_signersfile (or the file pointed bygpg.ssh.allowedSignersFilegit config) and/or the GPG local keyring, enabling the signature verification ongit log --show-signatures.For that, we must use User's API endpoint, which is also available in go-gitlab package.