git-verify-tag
Verify GPG signatures of tags
TLDR
Verify signed tag
$ git verify-tag [tag]
Verify multiple tags$ git verify-tag [tag1] [tag2]
Show raw signature$ git verify-tag --raw [tag]
Verbose output$ git verify-tag -v [tag]
SYNOPSIS
git verify-tag [options] tag...
DESCRIPTION
git verify-tag checks GPG signatures of tags. It verifies that tags were signed with valid GPG keys, confirming the authenticity of tagged releases.This is commonly used to verify the integrity of release tags in security-sensitive workflows.
PARAMETERS
-v, --verbose
Print tag contents.--raw
Print raw signature.--format format
Format output.
INSTALL
sudo apt install git
sudo dnf install git
sudo pacman -S git
sudo apk add git
sudo zypper install git
brew install git
nix profile install nixpkgs#git
CAVEATS
The signer's public key must already be available in the local GPG keyring (or configured SSH/X.509 verifier); an unknown key causes verification to fail even for a well-formed signature. Exits non-zero if any given tag lacks a valid signature.
SEE ALSO
git-tag(1), git-verify-commit(1)