git supports signed pushes as well as signed commits and tags. The signed pushes thing had a vulnerability though:<p><a href="http:&#x2F;&#x2F;mikegerwitz.com&#x2F;papers&#x2F;git-horror-story" rel="nofollow">http:&#x2F;&#x2F;mikegerwitz.com&#x2F;papers&#x2F;git-horror-story</a>
<a href="https:&#x2F;&#x2F;developer.atlassian.com&#x2F;blog&#x2F;2015&#x2F;05&#x2F;git-horror-story-loose-nonces&#x2F;" rel="nofollow">https:&#x2F;&#x2F;developer.atlassian.com&#x2F;blog&#x2F;2015&#x2F;05&#x2F;git-horror-stor...</a>