document signed commits (#152)

* feat: add faq to descibe signed commits * fix: rewrite faq * fix: make statement more declarative * 🎨 Format Code --------- Co-authored-by: Johnathan Gilday <[email protected]>
pixee · Mar 15, 2024 · 4a47441 · 4a47441
1 parent c550d0b
commit 4a47441
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/docs/faqs.md b/docs/faqs.md
@@ -24,6 +24,10 @@ As an aside, many of us have been in security our whole careers, and we're quite
 
 Each party agrees to hold data and confidential information of the other party in confidence and not to disclose, retain, or distribute such information to third parties or to use such information for any purpose whatsoever. Please take a look at our full [Privacy Policy](https://www.pixee.ai/privacy) for more detail.
 
+### How do I know Pixeebot made changes?
+
+Pixeebot works directly with your repositories in GitHub through pull requests, so you decide when and if you want to accept changes suggested by Pixeebot. You can find suggestions made by Pixeebot in the [Pixeebot Dashboard](https://app.pixee.ai/) as well as your repository's GitHub.com pull requests page. Also, Pixeebot [cryptographically signs every commit](https://git-scm.com/book/en/v2/Git-Tools-Signing-Your-Work), which means changes suggested by Pixeebot are guaranteed to have come from Pixeebot, were not modified after the fact and are [verified by GitHub](https://docs.github.com/en/authentication/managing-commit-signature-verification/about-commit-signature-verification).
+
 ### Where can I learn more and discuss Pixeebot?
 
 Users can join the Pixee community [on Slack](https://join.slack.com/t/openpixee/shared_invite/zt-1pnk7jqdd-kfwilrfG7Ov4M8rorfOnUA). This channel can be used to engage with peers who are also interested in Pixee. Feel free to email us at [email protected] with any questions or comments.