> On 29 Aug 2015, at 9:56 pm, jan i <j...@apache.org> wrote: > > On 29 August 2015 at 16:14, Andrea Pescetti <pesce...@apache.org> wrote: > >> On 29/08/2015 Peter Kelly wrote: >> >>> While tagging should do the job, it’s still typically possible to delete >>> or change tags. >>> >> >> Are you (plural) saying that Corinthia 0.1 is not tagged? Indeed it isn't, >> just checked. Yes, for sure it must be tagged, but the tag will apply to >> the whole repository state and not to a branch specifically. Also, the >> problem with mutable tags Peter explained is a real issue. You'll want to >> sign or annotate your tag properly. I'm unaware of a specific policy in >> place, but I'm sure that searching your inbox (or the ASF mailing list >> archives) for the word "immutable" will retrieve the relevant conversations >> and allow you to have enough context on what other projects do; git is >> widely used at the ASF after all. I can take a look at my archives too if >> useful, but hopefully the above suggestion is enough. >> > thanks I learned something new today :-)
Also it’s possible to sign tags with GPG keys. I haven’t done this in the past before (I’ve done signed commits in the past, e.g. 03bd5af when I first imported the editing code), but here’s some info on how to do it with tags: https://git-scm.com/book/en/v2/Git-Tools-Signing-Your-Work — Dr Peter M. Kelly pmke...@apache.org PGP key: http://www.kellypmk.net/pgp-key <http://www.kellypmk.net/pgp-key> (fingerprint 5435 6718 59F0 DD1F BFA0 5E46 2523 BAA1 44AE 2966)
