https://stackoverflow.com/questions/23584990/what-data-is-being-signed-when-you-...

		jfrunyon on Oct 12, 2021 \| parent \| context \| favorite \| on: SHA-1 'fully and practically broken' by new collis... https://stackoverflow.com/questions/23584990/what-data-is-be... says git signing just signs the commit hash (plus metadata: committer, commit message, etc).