https://communityblog.fedoraproject.org/source-git-sig-report-1/