Using 1Password for SSH signing

[davidcornu]

In case anyone has the same question, it is indeed possible to leverage 1Password's SSH integration to sign commits with Jujutsu's recently-shipped signing support (https://developer.1password.com/docs/ssh/git-commit-signing/).

In Jujutsu's config.toml (~/Library/Application Support/jj/config.toml on macOS), set

[signing]
sign-all = true
backend = "ssh"
key = "your-public-key-here" # You can copy this out of the SSH key entry in 1Password

[signing.backends.ssh]
# This value will vary by OS and can be obtained by following this step: 
# https://developer.1password.com/docs/ssh/git-commit-signing/#step-1-configure-git-commit-signing-with-ssh
program = "/Applications/1Password.app/Contents/MacOS/op-ssh-sign" 

Hope this helps ✌️

[JacobHayes]

It looks like setting the SSH_AUTH_SOCK env var (eg: in shell's rc file) works with the simple config too (and then you don't have to worry about OS-specific paths, at least in the jj config file):

[signing]
backend = "ssh"
key = "your-public-key-here"
sign-all = true

---

Also, using jj --debug commit is pretty helpful when trying to figure this out; the output will include things like:

2024-12-24T16:25:20.754285Z  INFO run_command:cmd_commit: jj_lib::ssh_signing: running SSH signing command command="ssh-keygen" "-Y" "sign" "-f" "<path to pubkey>" "-n" "git"

[jasikpark]

For Windows Powershell, I've used:

[signing]
behavior = "own"
backend = "ssh"
key = "your-public-key-here" # You can copy this out of the SSH key entry in 1Password

[signing.backends.ssh]
# This value will vary by OS and can be obtained by following this step:
# https://developer.1password.com/docs/ssh/git-commit-signing/#step-1-configure-git-commit-signing-with-ssh
program = "C:/Users/caleb/AppData/Local/Microsoft/WindowsApps/op-ssh-sign.exe"

[jasikpark]

For WSL I don't have anything in the jj config, curious if it still works if I deleted the above snippet from my Powershell config

[elenacjeth833-web]

For those wondering, yes—you can use 1Password’s SSH integration to sign commits with Jujutsu’s new signing feature. This allows secure, verifiable commits without manually handling keys, streamlining the https://lucky-tiger.casinologin.mobi/ workflow while keeping cryptographic integrity intact. It’s a handy way to combine password management with version control security for a smoother, safer development process.

[joyously]

sounds like a way for a rogue actor to spoof credentials?