Alternatively, they could provide some sort of on-page indication of a credentials&#x2F;e-mail mismatch, i.e. detect and publicly report when the HTTPS&#x2F;SSH credentials used for a `git push` aren&#x27;t associated with a verified e-mail address matching the commit&#x27;s `user.email`.<p>I reported this issue a long time ago to their security team, and got a really condescending &quot;we&#x27;re a collaborative community, it&#x27;s not a problem, you obviously don&#x27;t understand&quot; type of response. Pretty frustrating.