Signing TagsĪpart from commits, you can also sign tags. This is not limited to just committing, but also includes actions like merge, revert, cherry-pick, and rebase. You can configure if you want Tower to automatically sign new commits - either just in a certain repository or globally.

in a specific repository, by selecting the 'Settings' item in the sidebar of an open repository.

in the global configuration, in Tower's Preferences dialog.

You can easily select / set / switch keys in Tower: Either right-click on the tag in the sidebar or directly click it in one of the commit views. Verifying Signed TagsĪpart from commits, you can also verify the signatures for tags in Tower. On top of that, you can also see the signature status (green / orange / red) and access additional information through a popover window. Tower indicates directly in its History views if a commit was signed or not. What Can You Do With GPG in Tower? Verifying Signed Commits Open the Preferences dialog and select it on the 'Git Config' tab.

You should also add no-tty and use-agent to ~/.gnupg/gpg.conf if these values are missing there.Īfter installing GPG on your machine, you need to configure the GPG binary in Tower. If you install GPG via homebrew or other ways, you should make sure that you have set up the gpg-agent and pinentry-program helpers correctly. This ensures a valid configuration that works well with Tower. We recommend installing GPG Tools from its website. With such a signature, you can easily verify that a commit (or tag) was really made by a specific user.

Git uses GPG to sign and verify commits and tags. GPG is a collection of tools that allow signing and encrypting of data using asymmetric cryptography (with public / private keys). Read on to find out what exactly you can do with GPG in Tower and find a list of Frequetly Asked Questions.

Gpg mail mail mac