Skip to content

Bring attention to git config tag.gpgsign true for parity with auto-signing commits #43662

Closed

Description

@ara303

Code of Conduct

What article on docs.github.com is affected?

https://docs.github.com/en/authentication/managing-commit-signature-verification/signing-tags

What part(s) of the article would you like to see updated?

At the beginning of Signing commits, a "Tip" is present suggesting to set commit.gpgsign true by default.

No equivalent exists on Signing tags.

That can be fixed by taking the "Tip" from the article on commits, changing the language a little bit to tag.gpgsign true, and adding it as a "Tip" to the article on tags too.

It would make it easier for people to enable signing enabled for both commits and tags by default.

Additional information

I've created a PR for how I think it should be fixed (copies the wording from the commit article, changing "tag" in lieu of "commit"), but the PR template asks for an issue first.

Activity

  1. added
    contentThis issue or pull request belongs to the Docs Content team
    on Apr 4, 2026
  2. added
    triageDo not begin working on this issue until triaged by the team
    on Apr 4, 2026
  3. added
    authenticationContent relating to authentication
    and removed
    triageDo not begin working on this issue until triaged by the team
    on Apr 9, 2026
  4. Sharra-writes commented on Apr 9, 2026

    @Sharra-writes
    Contributor

    @ara303 This is something I would need to check in about, but you're linking me to a commit, not your PR, and I can't find your PR in our repository. Could you link me to your PR?

  5. ara303 commented on Apr 10, 2026

    @ara303
    ContributorAuthor

    Sorry, I'd used the wrong term! Although I'd intended to open a PR to begin with, I paused after reading the guidance asking for an issue first. I should've said fork above.

    Here's the commit of my proposed change. Also attached below:

    Tip

    To configure your Git client to sign tags by default for a local repository, in Git versions 2.23.0 and above, run git config tag.gpgsign true. To sign all tags by default in any local repository on your computer, run git config --global tag.gpgsign true.

    I'll happily open a PR here if you're granting permission?

    Note: I've double checked and it definitely was Git version 2.23.0 to add tag.gpgsign true as a configuration variable, so the information in the "Tip" is correct.

  6. Sharra-writes commented on Apr 14, 2026

    @Sharra-writes
    Contributor

    @ara303 Ah, okay, gotcha. This seems fairly low-stakes and like it won't ruin anyone's day if it doesn't work, so yes, I'll accept the change if you open a PR.

  7. ara303 commented on Apr 14, 2026

    @ara303
    ContributorAuthor

    Thank you, @Sharra-writes! 😅 It's as low impact as a change possibly could be.

    I've opened PR #43817.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    authenticationContent relating to authenticationcontentThis issue or pull request belongs to the Docs Content team

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions