This version of GitHub Enterprise Server will be discontinued on 2026-08-25. Discontinued releases are not supported. No patch releases will be made, even for critical security issues. For better performance, improved security, and new features in GitHub Enterprise Server, see Overview of the upgrade process. For help with the upgrade, GitHub Enterprise Support.

Signing tags

You can sign tags locally using GPG, SSH, or S/MIME.

Note

GitHub Desktop only supports commit signing if your Git client is configured to sign commits by default.

Tip

To configure your Git client to sign tags by default for a local repository, in Git versions 2.23.0 and above, run git config tag.gpgsign true. To sign all tags by default in any local repository on your computer, run git config --global tag.gpgsign true.

  1. To sign a tag, add -s to your git tag command.

    $ git tag -s MYTAG
# Creates a signed tag

  2. Verify your signed tag by running git tag -v [tag-name].

    $ git tag -v MYTAG
# Verifies the signed tag

Further reading