Git based releases

Yawar Amin yawar.amin at gmail.com
Sun May 19 14:08:38 EDT 2013


On 2013-05-19, at 11:54, Geert Janssens <janssens-geert at telenet.be> wrote:

> [...]
> 
> Yours would generate an unsigned annotated tag. In the git-tag man page I found we could 
> also generate signed tags using -s or -u.
> 
> I don't know the (dis)advantages of both methods and which one we should use then.

Signed is better for a release. Unsigned can be removed any time by anyone, without a trace. Signed gives us an audit trail.

Not to mention the benefit of a tag with a trusted OpenPGP signature.

ZZ




More information about the gnucash-devel mailing list