git/list[1] front-page[2] threads[3] people[4] search[5] about
 

git-verify-tag script

From
Jan Harkes <jaharkes@cs.cmu.edu>
Date
Jun 25, 2005, 18:35 UTC
Message-ID
<20050625183519.GB10425@delft.aura.cs.cmu.edu>

Here is a script to simplify validating the gpg signature created by git-tag-script. Might be useful to add to the git tree so that people don't have to search for the right post in the git mailinglist archives when they want to validate a tag.

Jan

---- #!/bin/sh

GIT_DIR=${GIT_DIR:-.git}

tag=$1 [ -f "$GIT_DIR/refs/tags/$tag" ] && tag=$(cat "$GIT_DIR/refs/tags/$tag")

git-cat-file tag $tag > .tmp-vtag || exit 1 cat .tmp-vtag | sed '/-----BEGIN PGP/Q' | gpg --verify .tmp-vtag - rm -f .tmp-vtag

Message 1 of 1 in “git-verify-tag script”
  1. Jan HarkesJun 25, 2005

Read the whole thread, see it on lore, or plain text.

$ cat FOOTERMessages come from the public archive at lore.kernel.org/git, fetched every hour. The front page is chosen and written each morning by an AI editor and can be wrong; the threads themselves are the record. About and API. For agents: an MCP server at https://gitlist.dev/mcp, and any thread, story or person page as Markdown by adding .md to its URL (or sending Accept: text/markdown). Details in /llms.txt.