Git Privacy

This document references all Git timestamps that pose a privacy concern.

Commit Object Timestamps

Git commit objects always have at least 2 timestamps:

• GIT_AUTHOR_DATE is the timestamp used for the "author" field.
• GIT_COMMITTER_DATE is the timestamp used for the "committer" field.

Annotated Tag Object Timestamps

Annotated Git tag objects always have at least 1 timestamp:

• GIT_COMMITTER_DATE is the timestamp used for the "committer" field.

GnuPG Signature Timestamps

GnuPG signatures on signed commits and signed annotated tags include a timestamp.

Git Forges

Some Git forges log and/or publicly reveal when commits are pushed.

TODO: Investigate and document each forge's Git push logging.

License

This file is licensed under CC-BY-SA 4.0.