From a88e6e4690729967416b375c6726c1642ee20af1 Mon Sep 17 00:00:00 2001 From: Zetok Zalbavar Date: Fri, 27 Jul 2018 19:23:17 +0100 Subject: [PATCH] docs: add to CONTRIBUTING.md Git config line for forcing singning tags Also change git config from global, to local, specific to repo, since signing all commits in every project committed to might not be desirable for some people, as GPG-signing usually involves typing in password, which is a slowdown. Partially addresses cause of #5125 and #5274. --- CONTRIBUTING.md | 10 ++++++---- 1 file changed, 6 insertions(+), 4 deletions(-) diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md index d38c79f13..7e78dde01 100644 --- a/CONTRIBUTING.md +++ b/CONTRIBUTING.md @@ -361,17 +361,19 @@ https://github.com/qTox/qTox/wiki/Testing *Not a requirement, just a friendly tip. :wink:* -It's nice when commits are being GPG-signed. Github has a few articles about -configuring & signing. +It's nice when commits and tags are being GPG-signed. Github has a few articles +about configuring & signing. https://help.github.com/articles/signing-commits-using-gpg/ And *tl;dr* version: -``` +```sh gpg --gen-key gpg --send-keys -git config --global commit.gpgsign true +git config --local commit.gpgsign true +# also force signing tags +git config --local tag.forceSignAnnotated true ```