diff options
author | Junio C Hamano <gitster@pobox.com> | 2016-05-26 13:17:22 -0700 |
---|---|---|
committer | Junio C Hamano <gitster@pobox.com> | 2016-05-26 13:17:22 -0700 |
commit | 968004c39c65e8a5d1a0b86af75fcf16a5eb6835 (patch) | |
tree | 2a1f1c9e15588b59a383da629aa9311850f98f50 | |
parent | d07211b5faefc9d94fe776cd5b50682544ad3257 (diff) | |
parent | 05a5869a01779e6fb55535aff9b01716aac42dcf (diff) | |
download | git-968004c39c65e8a5d1a0b86af75fcf16a5eb6835.tar.gz |
Merge branch 'kf/gpg-sig-verification-doc' into maint
Documentation for "git merge --verify-signatures" has been updated
to clarify that the signature of only the commit at the tip is
verified. Also the phrasing used for signature and key validity is
adjusted to align with that used by OpenPGP.
* kf/gpg-sig-verification-doc:
Documentation: clarify signature verification
-rw-r--r-- | Documentation/merge-options.txt | 7 | ||||
-rw-r--r-- | Documentation/pretty-formats.txt | 4 |
2 files changed, 7 insertions, 4 deletions
diff --git a/Documentation/merge-options.txt b/Documentation/merge-options.txt index f08e9b80c5..30808a01e7 100644 --- a/Documentation/merge-options.txt +++ b/Documentation/merge-options.txt @@ -89,8 +89,11 @@ option can be used to override --squash. --verify-signatures:: --no-verify-signatures:: - Verify that the commits being merged have good and trusted GPG signatures - and abort the merge in case they do not. + Verify that the tip commit of the side branch being merged is + signed with a valid key, i.e. a key that has a valid uid: in the + default trust model, this means the signing key has been signed by + a trusted key. If the tip commit of the side branch is not signed + with a valid key, the merge is aborted. --summary:: --no-summary:: diff --git a/Documentation/pretty-formats.txt b/Documentation/pretty-formats.txt index 671cebd95c..29b19b992f 100644 --- a/Documentation/pretty-formats.txt +++ b/Documentation/pretty-formats.txt @@ -143,8 +143,8 @@ ifndef::git-rev-list[] - '%N': commit notes endif::git-rev-list[] - '%GG': raw verification message from GPG for a signed commit -- '%G?': show "G" for a Good signature, "B" for a Bad signature, "U" for a good, - untrusted signature and "N" for no signature +- '%G?': show "G" for a good (valid) signature, "B" for a bad signature, + "U" for a good signature with unknown validity and "N" for no signature - '%GS': show the name of the signer for a signed commit - '%GK': show the key used to sign a signed commit - '%gD': reflog selector, e.g., `refs/stash@{1}` |