From b7c59badbbfe98502e0aa2dfcb0d6552849aa2a2 Mon Sep 17 00:00:00 2001 From: NitrogenPointBlue Date: Thu, 25 Aug 2022 04:01:45 -0400 Subject: [PATCH] Redirect sign and verify git tag aliases The 'stag' and 'vtag' git aliases are mentioned in both the Split GPG and the Code signing documents. Consolidated into the Code signing document. The Code signing version was kept as it explicitly calls the Bash shell. --- user/security-in-qubes/split-gpg.md | 11 +---------- 1 file changed, 1 insertion(+), 10 deletions(-) diff --git a/user/security-in-qubes/split-gpg.md b/user/security-in-qubes/split-gpg.md index b5a37af0..a10ca40f 100644 --- a/user/security-in-qubes/split-gpg.md +++ b/user/security-in-qubes/split-gpg.md @@ -262,16 +262,7 @@ If you would like to automatically sign all commits, you can add the following s gpgSign = true ``` -Lastly, if you would like to add aliases to sign and verify tags using the conventions the Qubes OS Project recommends, you can add the following snippet to `~/.gitconfig`. - -``` -[alias] -stag = "!id=`git rev-parse --verify HEAD`; git tag -s user_${id:0:8} -m \"Tag for commit $id\"" -vtag = !git tag -v `git describe` -``` - -Replace `user` with your short, unique nickname. -Now you can use `git stag` to add a signed tag to a commit and `git vtag` to verify the most recent tag that is reachable from a commit. +Lastly, if you would like to add aliases to sign and verify tags using the conventions the Qubes OS Project recommends, refer to the [code signing documentation](/doc/code-signing/#using-pgp-with-git). ## Importing public keys