Security News GitHub 'Verified' Commits Can Be Rewritten Into New Hashes Without Breaking Signatures TheHackerNews Daniel Bender 08 Jul 2026 Share Research shows signed Git commits can be re-encoded into fresh GitHub Verified hashes without changing files or breaking signatures.