search

hardkernel / u-boot

u-boot for odroid
177 stars 173 forks source link

Tags should be signed #40

Open xypron opened 7 years ago

xypron commented 7 years ago

Tag s905_6.0.1_v2.7 is not signed.

So it is impossible to verify the content of the tag.

Please, ensure that all tags are signed.

Best regards

Heinrich Schuchardt

xypron commented 7 years ago

What must we do for sign?

You need a gpg key. You can add it to your global configuration with

git config --global --add user.signingkey 2C051AC

Replace 2C051AC4 by the id of your key.

You can sign a new tag with

git tag -s TAG
git push origin TAG

To sign an existing tag use

git checkout TAG
git tag -sf TAG
git push -f origin TAG

Best regards

Heinrich Schuchardt