Esta versão do GitHub Enterprise Server será descontinuada em 2026-03-17. Nenhum lançamento de patch será feito, mesmo para questões críticas de segurança. Para obter melhor desempenho, segurança aprimorada e novos recursos, atualize para a última versão do GitHub Enterprise Server. Para obter ajuda com a atualização, entre em contato com o suporte do GitHub Enterprise.
Pontos de extremidade da API REST para tags do Git
Use a API REST para interagir com objetos de tag no banco de dados Git do GitHub.
Sobre tags Git
Uma tag do Git é semelhante a uma referência do Git, mas o commit do Git para o qual ela aponta nunca muda. As tags do Git são úteis quando você deseja apontar para versões específicas. Esses pontos de extremidade permitem a leitura e a gravação de objetos de tag no banco de dados Git do GitHub. A API tem suporte apenas para objetos de tag anotados, não tags leves.
Create a tag object
Note that creating a tag object does not create the reference that makes a tag in Git. If you want to create an annotated tag in Git, you have to do this call to create the tag object, and then create the refs/tags/[tag] reference. If you want to create a lightweight tag, you only have to create the tag reference - this call would be unnecessary.
Signature verification object
The response will include a verification object that describes the result of verifying the commit's signature. The following fields are included in the verification object:
| Name | Type | Description | 
|---|---|---|
verified | boolean | Indicates whether GitHub considers the signature in this commit to be verified. | 
reason | string | The reason for verified value. Possible values and their meanings are enumerated in table below. | 
signature | string | The signature that was extracted from the commit. | 
payload | string | The value that was signed. | 
verified_at | string | The date the signature was verified by GitHub. | 
These are the possible values for reason in the verification object:
| Value | Description | 
|---|---|
expired_key | The key that made the signature is expired. | 
not_signing_key | The "signing" flag is not among the usage flags in the GPG key that made the signature. | 
gpgverify_error | There was an error communicating with the signature verification service. | 
gpgverify_unavailable | The signature verification service is currently unavailable. | 
unsigned | The object does not include a signature. | 
unknown_signature_type | A non-PGP signature was found in the commit. | 
no_user | No user was associated with the committer email address in the commit. | 
unverified_email | The committer email address in the commit was associated with a user, but the email address is not verified on their account. | 
bad_email | The committer email address in the commit is not included in the identities of the PGP key that made the signature. | 
unknown_key | The key that made the signature has not been registered with any user's account. | 
malformed_signature | There was an error parsing the signature. | 
invalid | The signature could not be cryptographically verified using the key whose key-id was found in the signature. | 
valid | None of the above errors applied, so the signature is considered to be verified. | 
Tokens de acesso refinados para "Create a tag object"
Esse ponto de extremidade funciona com os seguintes tipos de token refinados:
- Tokens de acesso de usuário do aplicativo GitHub
 - Tokens de acesso à instalação do aplicativo GitHub
 - Tokens de acesso pessoal refinados
 
O token refinado deve ter os seguintes conjuntos de permissões:
- "Contents" repository permissions (write)
 
Parâmetros para "Create a tag object"
| Nome, Tipo, Descrição | 
|---|
accept string Setting to   | 
| Nome, Tipo, Descrição | 
|---|
owner string ObrigatórioThe account owner of the repository. The name is not case sensitive.  | 
repo string ObrigatórioThe name of the repository without the   | 
| Nome, Tipo, Descrição | ||||
|---|---|---|---|---|
tag string ObrigatórioThe tag's name. This is typically a version (e.g., "v0.0.1").  | ||||
message string ObrigatórioThe tag message.  | ||||
object string ObrigatórioThe SHA of the git object this is tagging.  | ||||
type string ObrigatórioThe type of the object we're tagging. Normally this is a  Pode ser um dos:   | ||||
tagger object An object with information about the individual creating the tag.  | ||||
Properties of  | 
| Nome, Tipo, Descrição | 
|---|
name string ObrigatórioThe name of the author of the tag  | 
email string ObrigatórioThe email of the author of the tag  | 
date string When this object was tagged. This is a timestamp in ISO 8601 format:   | 
Códigos de status de resposta HTTP para "Create a tag object"
| Código de status | Descrição | 
|---|---|
201 | Created  | 
409 | Conflict  | 
422 | Validation failed, or the endpoint has been spammed.  | 
Exemplos de código para "Create a tag object"
Exemplo de solicitação
curl -L \
  -X POST \
  -H "Accept: application/vnd.github+json" \
  -H "Authorization: Bearer <YOUR-TOKEN>" \
  -H "X-GitHub-Api-Version: 2022-11-28" \
  http(s)://HOSTNAME/api/v3/repos/OWNER/REPO/git/tags \
  -d '{"tag":"v0.0.1","message":"initial version","object":"c3d0be41ecbe669545ee3e94d31ed9a4bc91ee3c","type":"commit","tagger":{"name":"Monalisa Octocat","email":"octocat@github.com","date":"2011-06-17T14:53:35-07:00"}}'Response
Status: 201{
  "node_id": "MDM6VGFnOTQwYmQzMzYyNDhlZmFlMGY5ZWU1YmM3YjJkNWM5ODU4ODdiMTZhYw==",
  "tag": "v0.0.1",
  "sha": "940bd336248efae0f9ee5bc7b2d5c985887b16ac",
  "url": "https://HOSTNAME/repos/octocat/Hello-World/git/tags/940bd336248efae0f9ee5bc7b2d5c985887b16ac",
  "message": "initial version",
  "tagger": {
    "name": "Monalisa Octocat",
    "email": "octocat@github.com",
    "date": "2014-11-07T22:01:45Z"
  },
  "object": {
    "type": "commit",
    "sha": "c3d0be41ecbe669545ee3e94d31ed9a4bc91ee3c",
    "url": "https://HOSTNAME/repos/octocat/Hello-World/git/commits/c3d0be41ecbe669545ee3e94d31ed9a4bc91ee3c"
  },
  "verification": {
    "verified": false,
    "reason": "unsigned"
  }
}Get a tag
Signature verification object
The response will include a verification object that describes the result of verifying the commit's signature. The following fields are included in the verification object:
| Name | Type | Description | 
|---|---|---|
verified | boolean | Indicates whether GitHub considers the signature in this commit to be verified. | 
reason | string | The reason for verified value. Possible values and their meanings are enumerated in table below. | 
signature | string | The signature that was extracted from the commit. | 
payload | string | The value that was signed. | 
verified_at | string | The date the signature was verified by GitHub. | 
These are the possible values for reason in the verification object:
| Value | Description | 
|---|---|
expired_key | The key that made the signature is expired. | 
not_signing_key | The "signing" flag is not among the usage flags in the GPG key that made the signature. | 
gpgverify_error | There was an error communicating with the signature verification service. | 
gpgverify_unavailable | The signature verification service is currently unavailable. | 
unsigned | The object does not include a signature. | 
unknown_signature_type | A non-PGP signature was found in the commit. | 
no_user | No user was associated with the committer email address in the commit. | 
unverified_email | The committer email address in the commit was associated with a user, but the email address is not verified on their account. | 
bad_email | The committer email address in the commit is not included in the identities of the PGP key that made the signature. | 
unknown_key | The key that made the signature has not been registered with any user's account. | 
malformed_signature | There was an error parsing the signature. | 
invalid | The signature could not be cryptographically verified using the key whose key-id was found in the signature. | 
valid | None of the above errors applied, so the signature is considered to be verified. | 
Tokens de acesso refinados para "Get a tag"
Esse ponto de extremidade funciona com os seguintes tipos de token refinados:
- Tokens de acesso de usuário do aplicativo GitHub
 - Tokens de acesso à instalação do aplicativo GitHub
 - Tokens de acesso pessoal refinados
 
O token refinado deve ter os seguintes conjuntos de permissões:
- "Contents" repository permissions (read)
 
Esse ponto de extremidade pode ser usado sem autenticação ou as permissões acima mencionadas se apenas recursos públicos forem solicitados.
Parâmetros para "Get a tag"
| Nome, Tipo, Descrição | 
|---|
accept string Setting to   | 
| Nome, Tipo, Descrição | 
|---|
owner string ObrigatórioThe account owner of the repository. The name is not case sensitive.  | 
repo string ObrigatórioThe name of the repository without the   | 
tag_sha string Obrigatório | 
Códigos de status de resposta HTTP para "Get a tag"
| Código de status | Descrição | 
|---|---|
200 | OK  | 
404 | Resource not found  | 
409 | Conflict  | 
Exemplos de código para "Get a tag"
Exemplo de solicitação
curl -L \
  -H "Accept: application/vnd.github+json" \
  -H "Authorization: Bearer <YOUR-TOKEN>" \
  -H "X-GitHub-Api-Version: 2022-11-28" \
  http(s)://HOSTNAME/api/v3/repos/OWNER/REPO/git/tags/TAG_SHAResponse
Status: 200{
  "node_id": "MDM6VGFnOTQwYmQzMzYyNDhlZmFlMGY5ZWU1YmM3YjJkNWM5ODU4ODdiMTZhYw==",
  "tag": "v0.0.1",
  "sha": "940bd336248efae0f9ee5bc7b2d5c985887b16ac",
  "url": "https://HOSTNAME/repos/octocat/Hello-World/git/tags/940bd336248efae0f9ee5bc7b2d5c985887b16ac",
  "message": "initial version",
  "tagger": {
    "name": "Monalisa Octocat",
    "email": "octocat@github.com",
    "date": "2014-11-07T22:01:45Z"
  },
  "object": {
    "type": "commit",
    "sha": "c3d0be41ecbe669545ee3e94d31ed9a4bc91ee3c",
    "url": "https://HOSTNAME/repos/octocat/Hello-World/git/commits/c3d0be41ecbe669545ee3e94d31ed9a4bc91ee3c"
  },
  "verification": {
    "verified": false,
    "reason": "unsigned"
  }
}