Feature: Run tasks on signed commits only #3165
Description
Related to
Ansible (task execution), Service (scheduled tasks, alerts)
Impact
security improvements
Missing Feature
git allows to sign (and verify) commits using GPG and SSH keys (and x509 certificates with some limitations). This could be used to ensure that only signed commits are enrolled into production, allowing to run repositories without privileges.
Implementation
I would like to see ability, that tasks are run on commits signed by a group of keys. If the head commit isn't signed, the task should fail.
Design
No response