I don't think you can really protect published git notes.
What you can do is put them in an explicit namespace, as mentioned here :
I think that for "typical use" everyone stores the notes of others in a different place, for example. I keep Thomas lists in refs / remotes / trast / notes / so that they do not interfere with my own notes.
If in the same namespace, then they can be combined :
git checkout refs/notes/commits git fetch origin refs/notes/commits git merge FETCH_HEAD git update-ref refs/notes/commits HEAD git checkout master
But that will change their content.
source share