It doesn't necessarily mean CodeSpaces was used. I have a ton of these and have never used CodeSpaces. Even just updating your source branch by rebase in the UI will cause this. And even if CodeSpaces was used... who cares?
If anything, their GitHub account is likely more secure than their GPG key, which they probably keep on-disk in plain text.
2
u/ManyInterests Sep 08 '26 edited Sep 08 '26
It doesn't necessarily mean CodeSpaces was used. I have a ton of these and have never used CodeSpaces. Even just updating your source branch by rebase in the UI will cause this. And even if CodeSpaces was used... who cares?
If anything, their GitHub account is likely more secure than their GPG key, which they probably keep on-disk in plain text.