Signing tags

You can sign tags locally using GPG, SSH, or S/MIME.

Note

GitHub Desktop only supports commit signing if your Git client is configured to sign commits by default.

Tip

To configure your Git client to sign tags by default for a local repository, in Git versions 2.23.0 and above, run git config tag.gpgsign true. To sign all tags by default in any local repository on your computer, run git config --global tag.gpgsign true.

  1. To sign a tag, add -s to your git tag command.

    $ git tag -s MYTAG
# Creates a signed tag

  2. Verify your signed tag by running git tag -v [tag-name].

    $ git tag -v MYTAG
# Verifies the signed tag

Further reading