They already do[0]
reply 62114487+david-allison@users.noreply.github.com
[0] https://docs.github.com/en/account-and-profile/reference/ema...
How does the spammer get through this then?
replyIf used/implemented correctly, they don't.
reply* This is an optional feature via git config, with a further GitHub setting to reject commits pushed using your personal email address.
* If the GitHub setting is disabled, some GitHub-generated commits/fixups use your personal email (e.g. squash merge in the GitHub UI).
* I use my personal email in file-level copyright headers, even if the commits use the GitHub noreply email.
* I have my personal email on my GitHub profile, visible to logged in users.
they don't. it's an optional process, and many users don't change their git config to use the provided email
reply