git/list[1] front-page[2] threads[3] people[4] search[5] about
 

Re: git-pull and tag objects

From
Theodore Tso <tytso@mit.edu>
Date
Feb 10, 2007, 14:23 UTC
Message-ID
<20070210142322.GB25607@thunk.org>
In-Reply-To
<7v4ppurka1.fsf@assigned-by-dhcp.cox.net>

Thanks for this great explanation of how tags work. Hopefully some or all of this can get incorporated into the git's user's manual. Adding the paragraph to the git-tag as you did in your patch is a good start, but having the entire explanation of how things work in the user's manual would be a really good thing, IMHO.

This brings up another question which I've been looking for, but for which I haven't found a good answer in the git documentation. A google search shows a suggestion by hpa (and a brief discussion from sct) about how to handle conflicting tags back in 2005, but as far as I can tell it didn't go anywhere.

Anyway, the questions that don't appear to be addressed in the git documentations are:

1) Suppose I do a "git tag" of a release, and then realize that I
messed up, and I need to do some additional release work (i.e.,
editing a debian changelog file, etc.) before really doing another
release, what do I do to tag a later revision as the "real" version
v1.2?
2) Suppose I have v2.6.20 pointing to a particular revision, which was
obtained from pulling from Linus's tree, and I pull from some other
tree, say the wireless tree, and the maintainer there either
accidentally or maliciously has the tag v2.6.20 pointing to some other
revision.  What happens in that case?  Does the answer change if the
tag is a signed vs. unsigned tag?
3) The git-tag man page talks about GPG signing tags, but it doesn't
talk about how a GPG-signed tag is validated.  Does this happen
manually or automatically?  If it happens manually, how should a tag
be verified?  If the answer is using git-verify-tag, then there should
probably be better references in the documentation to git-verify-tag.
It might also be a very good idea to have a config option which
automatically verifies signed tags.
4) Is there a good/easy way to show whether a tag is a signed
vs. unsigned tag?  Short of using "git cat-file -t <tag>", there
doesn't seem to be, and being forced to use a low-level git command to
get that kind of information seems.... unsatisfactory.
Thanks,
						- Ted
Previous: Junio C HamanoNext: Linus Torvalds
Message 5 of 26 in “git-pull and tag objects”
  1. Alex BenneeFeb 8, 2007
  2. Alex RiesenFeb 9, 2007
  3. Junio C HamanoFeb 9, 2007
  4. git-fetch: document automatic tag following.Junio C Hamano, Feb 10, 2007
  5. Theodore TsoFeb 10, 2007
  6. Linus TorvaldsFeb 10, 2007
  7. Jakub NarebskiFeb 10, 2007
  8. Linus TorvaldsFeb 10, 2007
  9. Junio C HamanoFeb 11, 2007
  10. Jakub NarebskiFeb 12, 2007
  11. Theodore TsoFeb 11, 2007
  12. Linus TorvaldsFeb 11, 2007
  13. Junio C HamanoFeb 11, 2007
  14. Linus TorvaldsFeb 11, 2007
  15. Junio C HamanoFeb 11, 2007
  16. Junio C HamanoFeb 11, 2007
  17. Linus TorvaldsFeb 11, 2007
  18. Junio C HamanoFeb 11, 2007
  19. Theodore TsoFeb 12, 2007
  20. Junio C HamanoFeb 13, 2007
  21. Linus TorvaldsFeb 14, 2007
  22. Junio C HamanoFeb 14, 2007
  23. Johannes SchindelinFeb 14, 2007
  24. Linus TorvaldsFeb 14, 2007
  25. Jakub NarebskiFeb 15, 2007
  26. Johannes SchindelinFeb 15, 2007

Read the whole thread, see it on lore, or plain text.

$ cat FOOTERMessages come from the public archive at lore.kernel.org/git, fetched every hour. The front page is chosen and written each morning by an AI editor and can be wrong; the threads themselves are the record. About and API. For agents: an MCP server at https://gitlist.dev/mcp, and any thread, story or person page as Markdown by adding .md to its URL (or sending Accept: text/markdown). Details in /llms.txt.