Forging signed commits on GitHub

https://iter.ca/post/gh-sig-pwn/

https://twitter.com/home/status/1749295238198263910

https://twitter.com/home/status/1749394140851253396

https://twitter.com/home/status/1749520994706817304

https://twitter.com/home/status/1749552285057786223