gemini-cli - 💡(How to fix) Fix Identity Hijacking of [email protected] on GitHub [1 comments, 2 participants]

TL;DR

The issue can be mitigated by changing the Co-Authored-By line in the commit message to use a different email address that does not conflict with an existing GitHub user.

Guidance

• Verify that the Co-Authored-By line is the cause of the issue by checking if the incorrect co-author appears only in commits with this line.
• Consider using a different email address in the Co-Authored-By line that is not associated with any GitHub user, such as a custom domain or a email address that is not used by any GitHub user.
• Reach out to GitHub support to report the identity hijacking issue and request their assistance in resolving the problem.
• If possible, update the Gemini-CLI to use a secure and unique identity on GitHub and other public VCS platforms.

Example

No code snippet is provided as this issue is related to commit messages and GitHub user identities.

Notes

The issue seems to be related to how GitHub handles Co-Authored-By lines in commit messages and the email address used in this line. The solution may require coordination with GitHub support to fully resolve the issue.

Recommendation

Apply workaround: Change the Co-Authored-By line to use a different email address to avoid conflicts with existing GitHub users. This is a temporary solution until a more permanent fix can be implemented with GitHub's assistance.