Git allows us to commit as anyone we want. Simply putting user.name and user.email in .gitconfig, you can be literally anyone. This also means that anyone can use your identity. Check out A Git Horror Story: Repository Integrity With Signed Commits [https://mikegerwitz.com/papers/git-horror-story] by Mike