Spoofing git ID

Hello, when I make a push to GIT (Gitlab) repo, in the commits I see that commit has been made by user set in ‘user.email’ and ‘user.name’.

Why does it happen? I think that information about user, should be taken from Gitlab profile.
Now it’s possible to spoof our identification.

This is a feature of Git, rather than Gitlab.

See https://git-scm.com/book/en/v2/Git-Tools-Signing-Your-Work if you need your commit authorship to be verifiable.