NewsEditorialSource: GitHub
GitHub previews authenticated push attribution for Enterprise customers
GitHub announced a limited public preview of authenticated push attribution for GitHub Enterprise customers on October 12, 2026. GitHub says the feature persistently links each commit to the authenticated account that pushed it and displays that identity in its interface and API. According to the company, pushes were already authenticated; the feature adds a lasting record for each commit, separate from author and committer metadata. Administrators can add the Committer must match pusher condition to a ruleset, which GitHub says blocks pushes when committer metadata matches none of the pusher’s verified emails.
Why it matters
GitHub says client-supplied author and committer names and emails can mislead reviews and investigations, making recorded pusher identities potentially useful to maintainers. Enterprise customers can request preview access through their account team and should confirm how bots and service accounts behave before enforcing the rule broadly. The reviewed announcement does not explain those automation details or provide measured security outcomes, and independent verification of the implementation remains incomplete.
Attribution
Sources
- GitHubPush attribution for commits in limited public previewSource published (UTC)
Read the original source for full details and context.