Copilot Cloud Agent Now Signs Commits

Copilot cloud agent now signs every commit it makes, appearing as Verified on GitHub. This removes a major blocker: the agent can now work in repos with signed commit requirements.

Copilot Cloud Agent Now Signs Commits

TL;DR

  • Copilot cloud agent now cryptographically signs every commit it makes
  • Signed commits appear as "Verified" on GitHub, proving authenticity
  • Agent now works in repos with "Require signed commits" branch protection enabled

New

  • Commit signing — Copilot cloud agent automatically signs all commits, making them appear as Verified on GitHub and proving they weren't tampered with.
  • Branch protection compliance — Agent now works in repositories with the "Require signed commits" branch protection rule or ruleset enabled, removing a previous blocker.

To learn more, see the Copilot cloud agent documentation.

Source: GitHub Changelog