From c96d2e515b4bd8a99e417b5bd4cd1428d2a4ebd3 Mon Sep 17 00:00:00 2001 From: Matías Insaurralde Date: Mon, 30 Mar 2026 12:24:37 +0000 Subject: [PATCH] commitverify: skip unsigned commits before DB lookup Signed-off-by: Matías Insaurralde --- appview/commitverify/verify.go | 6 ++++++ 1 file(s) changed, 6 insertion(s)(+), 0 deletion(s)(-) diff --git a/appview/commitverify/verify.go b/appview/commitverify/verify.go --- a/appview/commitverify/verify.go +++ b/appview/commitverify/verify.go @@ -40,6 +40,12 @@ didPubkeyCache := make(map[string][]models.PublicKey) for _, commit := range ndCommits { + // skip unsigned commits early: no signature means no DB lookup needed, + // and most commits in a typical log are unsigned. + if commit.PGPSignature == "" { + continue + } + committerEmail := commit.Committer.Email if did, exists := emailToDid[committerEmail]; exists { // check if we've already fetched public keys for this did -- tangled.sh