{"thread":{"id":"1026","subject":"git-verify-tag script","startedAt":"2005-06-25T18:35:19Z","lastAt":"2005-06-25T18:35:19Z","messageCount":1,"participants":["Jan Harkes"],"isPatch":false,"patchVersion":null,"patchTotal":null},"messages":[{"id":"5270","messageId":"20050625183519.GB10425@delft.aura.cs.cmu.edu","threadId":"1026","inReplyTo":null,"subject":"git-verify-tag script","fromName":"Jan Harkes","fromEmail":"jaharkes@cs.cmu.edu","sentAt":"2005-06-25T18:35:19Z","receivedAt":"2005-06-25T18:35:19Z","isPatch":false,"sender":{"key":"jaharkes@cs.cmu.edu","avatar":"https://gravatar.com/avatar/cf95aecd150ca8ef33d6edc337ac4bb9e13aa4246fc3679257d578c7fddc1633?d=mp&s=160"},"body":"Here is a script to simplify validating the gpg signature created by\ngit-tag-script. Might be useful to add to the git tree so that people\ndon't have to search for the right post in the git mailinglist archives\nwhen they want to validate a tag.\n\nJan\n\n----\n#!/bin/sh\n\nGIT_DIR=${GIT_DIR:-.git}\n\ntag=$1\n[ -f \"$GIT_DIR/refs/tags/$tag\" ] && tag=$(cat \"$GIT_DIR/refs/tags/$tag\")\n\ngit-cat-file tag $tag > .tmp-vtag || exit 1\ncat .tmp-vtag | sed '/-----BEGIN PGP/Q' | gpg --verify .tmp-vtag -\nrm -f .tmp-vtag\n\n"}]}