This version of GitHub Enterprise Server was discontinued on 2026-04-09. No patch releases will be made, even for critical security issues. For better performance, improved security, and new features, upgrade to the latest version of GitHub Enterprise Server. For help with the upgrade, contact GitHub Enterprise support.

Signing tags

You can sign tags locally using GPG, SSH, or S/MIME.

Note

GitHub Desktop only supports commit signing if your Git client is configured to sign commits by default.

Tip

To configure your Git client to sign tags by default for a local repository, in Git versions 2.23.0 and above, run git config tag.gpgsign true. To sign all tags by default in any local repository on your computer, run git config --global tag.gpgsign true.

  1. To sign a tag, add -s to your git tag command.

    $ git tag -s MYTAG
# Creates a signed tag

  2. Verify your signed tag by running git tag -v [tag-name].

    $ git tag -v MYTAG
# Verifies the signed tag

Further reading