Comment by password4321

Don't jump in without reviewing the caveats:

* Not supported as "verified" in the GitHub UI [edit: mostly as opposed to "the main reason to try it"]

* A public transparency log "which may include user emails or repo identifiers"