From: Marc Weber <marco-oweber@gmx.de>
Date: Mon, 19 Nov 2012 01:50:35 GMT
Subject: verifying git file contents without checking out history?
Message-ID: <1353287836-sup-270@nixos>

git clone --depth=20 $url; git checkout $hash

How to verify that I have the contents I think I have - given that I
trust my local git executable?

Would it be enough to also store the git log --pretty=format:%T $hash
value and check that only? %T is the root tree hash.

Does git checkout verify the file tree checksum when receiving all blob
objects from a server?
Then verifying that %T didn't change should be enough to enable me
fetching sources and trust them without running git fsck which would
fetch all history.

Marc Weber