COMMIT STOMPING

Summary from the TLDR InfoSec newsletter

Commit Stomping is a way to change Git commit timestamps to hide when changes were made. This can make it hard to track who did what and when, especially during audits or code reviews. To protect against it, use signed commits, log events, and watch for unusual patterns.