Sign commits with gpg
As discussed in ticket:25102#comment:20, we should sign all top commits from branches that are used in nightly builds.
To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information
GitLab is used only for code review, issue tracking and project management. Canonical locations for source code are still https://gitweb.torproject.org/ https://git.torproject.org/ and git-rw.torproject.org.
As discussed in ticket:25102#comment:20, we should sign all top commits from branches that are used in nightly builds.