{# Signature state for a commit or a tag. Expects `sig` in scope.

   Nothing renders for an unsigned object. Every forge that badges "unsigned"
   is training people to ignore the badge, and the overwhelming majority of
   commits everywhere are unsigned. Only a signature that exists says anything.

   The verified case names the signer, which is the thing no forge without its
   own key store can do: the key that made the signature is the key that
   authenticates their pushes. #}
{% match sig %}
{% when git::signing::SignatureStatus::Unsigned %}
{% when git::signing::SignatureStatus::SignedBy { username, fingerprint } %}
<span class="git-signature is-verified" title="{{ fingerprint }}">
    Signed by <a href="/u/{{ username }}">{{ username }}</a>
</span>
{% when git::signing::SignatureStatus::ValidUnknownKey { fingerprint } %}
<span class="git-signature" title="{{ fingerprint }}">
    Signed, key not registered here
</span>
{% when git::signing::SignatureStatus::Invalid %}
<span class="git-signature is-bad">Signature does not verify</span>
{% when git::signing::SignatureStatus::Unverified { format } %}
<span class="git-signature">Signed with {{ format }}, not checked</span>
{% endmatch %}