git/Documentation/git-verify-commit.txt, branch v2.4.4Mirror of https://git.kernel.org/pub/scm/git/git.git/
https://git.shady.money/git/atom?h=v2.4.42014-06-23T22:50:31Zverify-commit: scriptable commit signature verification2014-06-23T22:50:31ZMichael J Grubergit@drmicha.warpmail.net2014-06-23T07:05:49Zurn:sha1:d07b00b7f31d0cb6675b4bdba269ce7f087ddd24
Commit signatures can be verified using "git show -s --show-signature"
or the "%G?" pretty format and parsing the output, which is well suited
for user inspection, but not for scripting.
Provide a command "verify-commit" which is analogous to "verify-tag": It
returns 0 for good signatures and non-zero otherwise, has the gpg output
on stderr and (optionally) the commit object on stdout, sans the
signature, just like "verify-tag" does.
Signed-off-by: Michael J Gruber <git@drmicha.warpmail.net>
Signed-off-by: Junio C Hamano <gitster@pobox.com>