{"version":"2.1.224","anchor":"git-identity-commit-signing-and-proxied-clones-for-runner-se","canonical_anchor":"git-identity-commit-signing-and-proxied-clones-for-runner-se","heading":"Git identity, commit signing and proxied clones for runner sessions","tier":"use","area":"Self-Hosted Runner","scope":null,"heads_up":null,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.224\/e\/git-identity-commit-signing-and-proxied-clones-for-runner-se","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.224","markdown":"### Git identity, commit signing and proxied clones for runner sessions\n\n--configure-git sets a commit identity and installs SSH commit signing backed by a code-sign subcommand.\n\n**What**\n\n`--configure-git` sets a git identity of Claude <noreply@anthropic.com>, installs an SSH commit signing program and Co-authored-by hook stubs under `<base-dir>\/.runner`, and requires git 2.34 or newer. The signing itself is done by a new `self-hosted-runner code-sign` subcommand, which sends the commit to the session's signing endpoint using the session access token.\n\n**Details**\n\n- `--use-anthropic-git-proxy` routes clones through Anthropic's git proxy using a repo-local credential helper. It requires `--capacity 1` and git 2.32 or newer.\n- A governed-git configuration delivered by the server can supersede the proxy, mounting repos read-only and resetting `remote.origin.url` back to the plain upstream address.\n- Only SSH-style signing is supported by `code-sign`; anything else is rejected.\n\n**Evidence**\n\n`code-sign: only SSH-style signing (-Y sign) is supported; got: `\n\n- Area: Self-Hosted Runner\n- Names: `--configure-git`, `self-hosted-runner code-sign`, `--use-anthropic-git-proxy`\n- Tier: Use it now\n- Useful: 3\/5\n- Signal: 4\/5"}