Copilot Cloud Agent Now Signs Commits
Copilot cloud agent now signs every commit it makes, appearing as Verified on GitHub. This removes a major blocker: the agent can now work in repos with signed commit requirements.
TL;DR
- Copilot cloud agent now cryptographically signs every commit it makes
- Signed commits appear as "Verified" on GitHub, proving authenticity
- Agent now works in repos with "Require signed commits" branch protection enabled
New
- Commit signing — Copilot cloud agent automatically signs all commits, making them appear as Verified on GitHub and proving they weren't tampered with.
- Branch protection compliance — Agent now works in repositories with the "Require signed commits" branch protection rule or ruleset enabled, removing a previous blocker.
To learn more, see the Copilot cloud agent documentation.
Source: GitHub Changelog