git-evtag1
Sign a git commit with extended checksums
Usage
git evtag
sign
[OPTIONS ...]
TAGNAME
git evtag
verify
[OPTIONS ...]
TAGNAME
Overview
While git can use GPG to sign tags and commits, it only covers a commit object, which is subject to SHA1 weaknesses. This tool uses SHA512 across the entire content of a tag, creating a stronger level of assurance.
Options
See the subcommand help, e.g. git-evtag sign --help.
Releases
3 releases since Debian 12 (Bookworm); the text changed 2 times.