In .gitroot/plugins.yml of your root repository add:
.gitroot/plugins.yml
1- url: Not released 2 checksum:
Every commit no signed or with unknown user, will be reported in graft. Maintain the .gitroot/allowed_signers file.
.gitroot/allowed_signers