Well, this is a build/release process where we can't pass additional command line options to git. TO be hones, is case of annotated tags there is already option tag.forceSignAnnotated. However, non annotated tags are not forced to be signed. Additionally, the proposed option is symmetric with commit.gpgSign. Tigran. ----- Original Message ----- > From: "Jonathan Nieder" <jrnieder@xxxxxxxxx> > To: "Tigran Mkrtchyan" <tigran.mkrtchyan@xxxxxxx> > Cc: git@xxxxxxxxxxxxxxx > Sent: Thursday, October 26, 2017 10:55:09 PM > Subject: Re: [PATCH] tag: add tag.gpgSign config option to force all tags be GPG-signed > Hi, > > Tigran Mkrtchyan wrote: > >> In some workflows we have no control on how git command is executed, >> however a signed tags are required. > > Don't leave me hanging: this leaves me super curious. Can you tell me > more about these workflows? > > Thanks and hope that helps, > Jonathan