chore: clarify readme SSH key paragraph

pull/94/head
Phorcys 2 years ago
parent 415f5f6ef9
commit bf7f9d0416
No known key found for this signature in database

@ -12,8 +12,7 @@ tags: [helper, git]
This module downloads your SSH key from Coder and uses it to sign commits with Git.
It requires `jq` to be installed inside your workspace.
This is not recommended if your workspace can be accessed by other/unwanted people, in the case an administrator account on your Coder account gets breached, the attacker could gain access to your workspace and sign commits on your behalf (since the key is stored in the workspace).
If your Coder account gets breached, the SSH key could also be used on your behalf.
Please observe that using the SSH key that's part of your Coder account for commit signing, means that in the event of a breach of your Coder account, or a malicious admin, someone could perform commit signing pretending to be you.
```hcl
module "git-commit-signing" {

Loading…
Cancel
Save