security - How to verify a git commit at which a git tag is pointing? -
i understand, 1 can verify signed git:
but how verify git commit @ tag pointing? using @ moment.
git verify-commit "$(git rev-list --max-count 1 tag-name)"
git rev-list --max-count 1 tag-name
figure out @ commit tag pointing , passing git verify-commit
.
is there simpler way?
does sane, secure?
(what's background of this? related git sha 1 , git security.)
Comments
Post a Comment