CodeMirror
/
itpol
mirror of
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

code-integrity: Link to git-evtag 

This doc mentions the SHA1 for example which is something evtag was explicitly
designed to address, and it long predates shatter.io etc.

Yes someday I'll try to find the time to push evtag to git upstream...
This commit is contained in:
Colin Walters 2017-12-14 17:02:56 -05:00
parent 790759787e
commit b2e45bc641
1 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
protecting-code-integrity.md
View File

@ -1077,6 +1077,9 @@ Our recommendation is to always sign git tags, as this allows other developers
to ensure that the git repository they are working with has not been
maliciously altered (e.g. in order to introduce backdoors).
See also [git-evtag](http://github.com/cgwalters/git-evtag) for an even
stronger form of signed tags.
##### How to verify signed tags
To verify a signed tag, simply use the `verify-tag` command: