mv contrib/verify-commits/pre-push-hook.sh to maintainer tools repo
What the developer wrote
Authored by MarcoFalke
mv contrib/verify-commits/pre-push-hook.sh to maintainer tools repo
What changed, and why it matters
This commit simply deletes a helper shell script that was used by Bitcoin Core maintainers as a Git pre-push hook. The script checked whether commits being pushed to the project's GitHub repository were cryptographically signed. It is being moved to a separate maintainer tools repository. There is no code change to Bitcoin Core itself, no vulnerability, and no security fix.
No security action required. Reviewers may verify that the moved script is present in the maintainer tools repository if they rely on it for local workflow enforcement.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The commit removes contrib/verify-commits/pre-push-hook.sh (21 lines deleted, 0 added). The script validated that pushes to github.com/bitcoin/bitcoin refs/heads/master passed ./contrib/verify-commits/verify-commits.py. The actual verification logic (verify-commits.py) remains in the repository; only the optional Git hook wrapper is relocated. No functional, consensus, networking, or wallet code is modified.
Changed components
contrib/verify-commits/pre-push-hook.shInspect captured patch +0 / −21
diff --git a/contrib/verify-commits/pre-push-hook.sh b/contrib/verify-commits/pre-push-hook.sh
deleted file mode 100755
index a532bf74..00000000
--- a/contrib/verify-commits/pre-push-hook.sh
+++ /dev/null
@@ -1,21 +0,0 @@
-#!/usr/bin/env bash
-# Copyright (c) 2014-present The Bitcoin Core developers
-# Distributed under the MIT software license, see the accompanying
-# file COPYING or http://www.opensource.org/licenses/mit-license.php.
-
-export LC_ALL=C
-if ! [[ "$2" =~ ^(git@)?(www.)?github.com(:|/)bitcoin/bitcoin(.git)?$ ]]; then
- exit 0
-fi
-
-while read LINE; do
- set -- A "$LINE"
- if [ "$4" != "refs/heads/master" ]; then
- continue
- fi
- if ! ./contrib/verify-commits/verify-commits.py "$3" > /dev/null 2>&1; then
- echo "ERROR: A commit is not signed, can't push"
- ./contrib/verify-commits/verify-commits.py
- exit 1
- fi
-done < /dev/stdin
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.