Commit to revert Pull Request via UI not verified

[dpprdan]

Select Topic Area

Bug

Body

When I revert a Pull Request via the regular web interface, the resulting commit is not signed/verified, while any other commit I make via the web interface is verified.

GitHub will automatically use GPG to sign commits you make using the web interface. Commits signed by GitHub will have a verified status.
https://docs.github.com/en/authentication/managing-commit-signature-verification/about-commit-signature-verification

IMHO the revert commits should be signed as well.

[dpprdan]

It seems that this depends on whether the original PR (the one to be reverted) was merged with a simple merge commit or a squash and merge.

Compare

dpprdan/revert_verified_test#2, which reverts dpprdan/revert_verified_test#1, which was merged with a simple merge commit

with

dpprdan/revert_verified_test#4, which reverts dpprdan/revert_verified_test#3, which was merged with a squash and merge.

dpprdan/revert_verified_test@d6cab27 is not signed/verified, but should IMO.

[othmane399]

same bug for us, really annoying as we cannot enforce signature for all members...

[somal-vora]

Is this possible to solve ? revert should be single quicks and with signed ideally.

[othmane399]

For us it was fixed since github have announced rotation of some of their internal keys, so you should maybe retry ? on our side we enforced signed commits on all organization couples of weeks ago and there's no issue now.