How to keep the commits signed with GPG key

[ShadyMedic]

Hi there.

I'm using git-filter-repo to purge secrets that I accidentally committed a long time ago (SMTP and database passwords) and everything works great, but I noticed that after I perform the operation, all signed commits aren't signed anymore.

Is it possible to tell the program to use a certain GPG key while rewriting the history of my repository?

Thanks in advance.

[newren]

git filter-repo builds on top of fast-export and fast-import. fast-export has to strip the existing signatures because they won't be valid after the modifications to history. And fast-import has no option to add a signature to commits with some specified key. Such a feature would need to be added to upstream git, then filter-repo would be able to use it.

Sorry there isn't a better answer at this time.

[ShadyMedic]

Ok, thanks for letting me know.

[vhscom]

Although you cannot keep the existing GPG signed commits you may always resign them.

[heygarrett]

Just a heads up for anyone else that finds this and re-signs their commit history like I did: using the command in this Stack Overflow answer signed all but the first commit in my history, which prevented me from pushing any of the commits to a new remote repo that required commits be signed. I ended up needing to rebase on the initial commit already present in the remote repo.