stigma
Install
In .gitroot/plugins.yml of your root repository add:
1- purl: pkg:gitroot/gitroot/stigma@0.0.2?checksum=sha256:6c07c0e60466f7693943d7f63afdbaa6c982dca6e1d33d9d4fd1ceaeeded4c0e®istry=https:%2F%2Fgitroot.dev%2Freleases%2F0.5.0
Every commit no signed or with unknown user, will be reported in graft. Maintain the .gitroot/allowed_signers file.