Summary - Security

Combine security steps to set up a signed and recoverable repository.

A secure and recoverable repository

A secure Git environment consists of several complementary measures. GPG signatures help verify commit origins. SSH keys provide secure access to remote servers. Regular backups provide a way to recover from data loss.

GPG signing → Commit verification
SSH keys → Secure access
Backup → Recovery

When these measures are applied together, the repository becomes both more secure and more resilient to failures.

Exercise Combine security settings and backup

Enable default GPG commit signing in the Git repository and select the ABCD1234 key. Then set the remote repository URL to its SSH format and create a mirror backup named project-backup.git from the current repository. Finally, print a completion message.

Show example solution

git config commit.gpgsign true
git config user.signingkey ABCD1234
git remote set-url origin git@github.com:team/project.git
git clone --mirror . project-backup.git
echo "Güvenlik ve yedekleme yapılandırması tamamlandı."

Test yourself

You are setting up signed commits, SSH access, and disaster recovery for a new project. Which plan correctly addresses all three goals?
- Disable commit signing and rely only on local history
- Sign commits with GPG, connect with an SSH key, and keep an independent repository backup
- Use one password and store only the working directory
- Share the SSH private key publicly and avoid backups
Show answer

Sign commits with GPG, connect with an SSH key, and keep an independent repository backup — GPG signing, SSH keys, and independent backups address different security needs and should be used together.

Choose the secure access method

git remote set-url origin ____git@github.com:team/project.git

Show answer

git remote set-url origin sshgit@github.com:team/project.git

Security and recovery summary

GPG signing

Helps verify commit signatures
SSH key

Key-based access to a remote server
Disaster recovery

Restores service after a failure
Mirror backup

Keeps a full copy of repo references

Next lesson: Internals

We Are Enhancing Your Experience

Cookie Preferences

Strictly Necessary Cookies

Analytical Cookies