git/list[1] front-page[2] threads[3] people[4] search[5] about
 

Re: Using signed tag in pull requests

From
Junio C Hamano <gitster@pobox.com>
Date
Jan 18, 2012, 01:47 UTC
Message-ID
<7vwr8pok7w.fsf@alter.siamese.dyndns.org>
In-Reply-To
<CAH5451nSMcJ50fu2qtMkw4zPpx-Kg-k-jqCcpryu+pkC8JX8rw@mail.gmail.com>
Andrew Ardill <andrew.ardill@gmail.com> writes:
Show 10 quoted lines
>> Starting from Git release v1.7.9, a contributor can add a signed tag to
>> the commit at the tip of the history and ask the integrator to pull that
>> signed tag. When the integrator runs `git pull`, the signed tag is
>> automatically verified to assure that the history is not tampered with.
>> In addition, the resulting merge commit records the content of the signed
>> tag, so that other people can verify that the branch merged by the
>> contributor was signed by the contributor, without fetching the signed tag
>
> I think you mean to say 'the branch merged by the integrator was signed
> by the contributor'.
Definitely. I'll update my local copy.
Thanks for spotting this.
Previous: Andrew ArdillNext: Andrew Ardill
Message 9 of 10 in “Using signed tag in pull requests”
  1. Junio C HamanoJan 17, 2012
  2. pulling signed tag: add howto documentJunio C Hamano, Jan 17, 2012
  3. Marc BranchaudJan 18, 2012
  4. Junio C HamanoJan 18, 2012
  5. Marc BranchaudJan 18, 2012
  6. Junio C HamanoJan 18, 2012
  7. Marc BranchaudJan 18, 2012
  8. Andrew ArdillJan 18, 2012
  9. Junio C HamanoJan 18, 2012
  10. Andrew ArdillJan 18, 2012

Read the whole thread, see it on lore, or plain text.

$ cat FOOTERMessages come from the public archive at lore.kernel.org/git, fetched every hour. The front page is chosen and written each morning by an AI editor and can be wrong; the threads themselves are the record. About and API. For agents: an MCP server at https://gitlist.dev/mcp, and any thread, story or person page as Markdown by adding .md to its URL (or sending Accept: text/markdown). Details in /llms.txt.