444444< h1 > git-tag(1) Manual Page</ h1 >
445445< h2 id ="_name "> NAME</ h2 >
446446< div class ="sectionbody ">
447- < p > git-tag - Create, list, delete or verify a tag object signed with GPG </ p >
447+ < p > git-tag - Create, list, delete or verify tags </ p >
448448</ div >
449449</ div >
450450< div id ="content ">
@@ -489,16 +489,18 @@ <h2 id="_description">DESCRIPTION</h2>
489489(i.e., a lightweight tag) is created.</ p >
490490</ div >
491491< div class ="paragraph ">
492- < p > A GnuPG signed tag object will be created when < code > -s</ code > or < code > -u</ code >
493- < em > <key-id></ em > is used. When < code > -u</ code > < em > <key-id></ em > is not used, the
494- committer identity for the current user is used to find the
495- GnuPG key for signing. The configuration variable < code > gpg.program</ code >
496- is used to specify custom GnuPG binary.</ p >
492+ < p > A cryptographically signed tag object will be created when < code > -s</ code > or
493+ < code > -u</ code > < em > <key-id></ em > is used. The signing backend (GPG, X.509, SSH, etc.) is
494+ controlled by the < code > gpg.format</ code > configuration variable, defaulting to
495+ OpenPGP. When < code > -u</ code > < em > <key-id></ em > is not used, the committer identity for
496+ the current user is used to find the key for signing. The
497+ configuration variable < code > gpg.program</ code > is used to specify a custom
498+ signing binary.</ p >
497499</ div >
498500< div class ="paragraph ">
499501< p > Tag objects (created with < code > -a</ code > , < code > -s</ code > , or < code > -u</ code > ) are called "annotated"
500502tags; they contain a creation date, the tagger name and e-mail, a
501- tagging message, and an optional GnuPG signature. Whereas a
503+ tagging message, and an optional cryptographic signature. Whereas a
502504"lightweight" tag is simply a name for an object (usually a commit
503505object).</ p >
504506</ div >
@@ -523,10 +525,12 @@ <h2 id="_options">OPTIONS</h2>
523525< dt class ="hdlist1 "> < code > -s</ code > </ dt >
524526< dt class ="hdlist1 "> < code > --sign</ code > </ dt >
525527< dd >
526- < p > Make a GPG-signed tag, using the default e-mail address’s key.
527- The default behavior of tag GPG-signing is controlled by < code > tag.gpgSign</ code >
528- configuration variable if it exists, or disabled otherwise.
529- See < a href ="git-config.html "> git-config(1)</ a > .</ p >
528+ < p > Make a cryptographically signed tag, using the default signing
529+ key. The signing backend used depends on the < code > gpg.format</ code >
530+ configuration variable. The default key is determined by the
531+ backend. For GPG, it’s based on the committer’s email address,
532+ while for SSH it may be a specific key file or agent
533+ identity. See < a href ="git-config.html "> git-config(1)</ a > .</ p >
530534</ dd >
531535< dt class ="hdlist1 "> < code > --no-sign</ code > </ dt >
532536< dd >
@@ -536,7 +540,10 @@ <h2 id="_options">OPTIONS</h2>
536540< dt class ="hdlist1 "> < code > -u</ code > < em > <key-id></ em > </ dt >
537541< dt class ="hdlist1 "> < code > --local-user=</ code > < em > <key-id></ em > </ dt >
538542< dd >
539- < p > Make a GPG-signed tag, using the given key.</ p >
543+ < p > Make a cryptographically signed tag using the given key. The
544+ format of the <key-id> and the backend used depend on the
545+ < code > gpg.format</ code > configuration variable. See
546+ < a href ="git-config.html "> git-config(1)</ a > .</ p >
540547</ dd >
541548< dt class ="hdlist1 "> < code > -f</ code > </ dt >
542549< dt class ="hdlist1 "> < code > --force</ code > </ dt >
@@ -551,7 +558,7 @@ <h2 id="_options">OPTIONS</h2>
551558< dt class ="hdlist1 "> < code > -v</ code > </ dt >
552559< dt class ="hdlist1 "> < code > --verify</ code > </ dt >
553560< dd >
554- < p > Verify the GPG signature of the given tag names .</ p >
561+ < p > Verify the cryptographic signature of the given tags .</ p >
555562</ dd >
556563< dt class ="hdlist1 "> < code > -n</ code > < em > <num></ em > </ dt >
557564< dd >
@@ -731,13 +738,27 @@ <h2 id="_configuration">CONFIGURATION</h2>
731738< div class ="listingblock ">
732739< div class ="content ">
733740< pre > [user]
734- signingKey = <gpg-key-id></ pre >
741+ signingKey = <key-id></ pre >
742+ </ div >
735743</ div >
744+ < div class ="paragraph ">
745+ < p > The signing backend can be chosen via the < code > gpg.format</ code > configuration
746+ variable, which defaults to < code > openpgp</ code > . See < a href ="git-config.html "> git-config(1)</ a >
747+ for a list of other supported formats.</ p >
748+ </ div >
749+ < div class ="paragraph ">
750+ < p > The path to the program used for each signing backend can be specified
751+ with the < code > gpg.</ code > < em > <format></ em > < code > .program</ code > configuration variable. For the
752+ < code > openpgp</ code > backend, < code > gpg.program</ code > can be used as a synonym for
753+ < code > gpg.openpgp.program</ code > . See < a href ="git-config.html "> git-config(1)</ a > for details.</ p >
736754</ div >
737755< div class ="paragraph ">
738756< p > < code > pager.tag</ code > is only respected when listing tags, i.e., when < code > -l</ code > is
739- used or implied. The default is to use a pager.
740- See < a href ="git-config.html "> git-config(1)</ a > .</ p >
757+ used or implied. The default is to use a pager.</ p >
758+ </ div >
759+ < div class ="paragraph ">
760+ < p > See < a href ="git-config.html "> git-config(1)</ a > for more details and other configuration
761+ variables.</ p >
741762</ div >
742763</ div >
743764</ div >
@@ -1049,7 +1070,7 @@ <h2 id="_git">GIT</h2>
10491070</ div >
10501071< div id ="footer ">
10511072< div id ="footer-text ">
1052- Last updated 2025-10-14 14:37:27 -0700
1073+ Last updated 2025-10-28 12:16:15 -0700
10531074</ div >
10541075</ div >
10551076</ body >
0 commit comments