Back to browse
GitHub Repository

Forge git commits like a pro haha

3 starsGo

I built a CLI to fake Git commits

by TDiblik·Apr 19, 2026·2 points·0 comments

AI Analysis

MidShip It

Automates Git identity spoofing, but native env vars already allow most of this.

Strengths
  • Bundles GPG key generation and signing into single commands for demos.
  • Dry-run flag prevents accidental history rewriting while testing security workflows safely.
  • Clear security focus helps convince teams to enforce commit signing policies.
Weaknesses
  • AI-generated tests admitted as untrusted by the author in the project README.
  • Native Git environment variables already allow most identity manipulation without extra tools.
Category
Target Audience

Security engineers, engineering managers, DevSecOps

Similar To

git-filter-repo · BFG Repo-Cleaner · git rebase

Post Description

Heyy, I built git-forge in an afternoon to demonstrate how easy it can be to fake git history. It's basically just a wrapper around Git and GnuPG cli(s) that automates the usual "faking" you'd want to do (commit, rewrite, amend). I found it interesting to see how easily you can manipulate it (tho it makes sense), and it's a great party trick to convince your team to start signing their commits (problem I encountered many times). I haven't tested it fully, however it worked while I was developing it, so feel free to open any issues/PRs (+ I AI generated some tests for it but I don't trust them that much, I'll add more manually written tests tomorrow, I'm headed of to sleep now).

Similar Projects