[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: please use signed git commits (and tags)



On Mon, May 25, 2015 at 01:53:28PM -0300, Henrique de Moraes Holschuh wrote:
> Commits: trying to change the signature will change the commit hash.
> So, it works just like amending the commit.  In fact, "git commit
> --amend -S" will sign/re-sign the commit by creating a new commit, just
> like any other "ammending" of commits works.
> 
> Note that rebase (or anything that changes the commit itself) will cause
> it to lose the signature, and I don't think git will ask you to sign
> them again.

If you want to sign a rebase or cherry-pick, use -S.  git rebase -S will
automatically sign commits all rebased commits except those created with
git commit, where you'll have to pass -S yourself.
-- 
brian m. carlson / brian with sandals: Houston, Texas, US
+1 832 623 2791 | http://www.crustytoothpaste.net/~bmc | My opinion only
OpenPGP: RSA v4 4096b: 88AC E9B2 9196 305B A994 7552 F1BA 225C 0223 B187

Attachment: signature.asc
Description: Digital signature


Reply to: