GitHub commit Verification logic flaw and bypass
A security researcher disclosed a design flaw in GitHub's commit verification system that allows attackers to spoof verified commits by exploiting a mismatch between the author and committer fields. G…