1
GitHub commit Verification logic flaw and bypass
GitHub提交验证存在逻辑漏洞，AI Agent可轻松绕过未开启Vigilant Mode的GPG签名，安全风险升级。
I know Git is not designed to use in the way GitHub is operating under and the spoofying had been an old issue that had been brought up throughout the…