Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Tags should be signed #40

Open
xypron opened this issue May 1, 2017 · 1 comment
Open

Tags should be signed #40

xypron opened this issue May 1, 2017 · 1 comment

Comments

@xypron
Copy link

xypron commented May 1, 2017

Tag s905_6.0.1_v2.7 is not signed.

So it is impossible to verify the content of the tag.

Please, ensure that all tags are signed.

Best regards

Heinrich Schuchardt

@xypron
Copy link
Author

xypron commented May 2, 2017

What must we do for sign?

You need a gpg key. You can add it to your global configuration with

git config --global --add user.signingkey 2C051AC

Replace 2C051AC4 by the id of your key.

You can sign a new tag with

git tag -s TAG
git push origin TAG

To sign an existing tag use

git checkout TAG
git tag -sf TAG
git push -f origin TAG

Best regards

Heinrich Schuchardt

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant