Skip to content

Sign Git Tags with SSH Keys

What does this MR do and why?

This MR adds support for SSH signed git tags via the render_ssh_signed_tags_verification_status FF

References

Screenshots or screen recordings

Before After
Screenshot_2025-08-14_at_11.01.35 Screenshot_2025-08-14_at_11.00.59

How to set up and validate locally

  1. If you don't already have it, configure signing with SSH key (https://docs.gitlab.com/user/project/repository/signed_commits/ssh/#configure-git-to-sign-commits-with-your-ssh-key)
  2. Create a new project
  3. Create a signed tag git tag -s v9.0.0 -m "GDK Signed Tag with SSH"
  4. Push the signed tag git push origin v9.0.0
  5. Enable the render_ssh_signed_tags_verification_status feature flag (The existing behaviour is to render the unverified status badge)
  6. Check on the tags view and see that associated signature is verified

Note: For step 6, ensure you are using a verified gdk email from profile/emails to see the green badge. If your SSH signature email is different, you can add that email in gdk and confirm it in console:

admin_user = User.first
email = admin_user.emails.find_by_email('email_added_in_gdk')
email.confirm

MR acceptance checklist

Evaluate this MR against the MR acceptance checklist. It helps you analyze changes to reduce risks in quality, performance, reliability, security, and maintainability.

Related to #384473 (closed)

Edited by Olaoluwa Oluro

Merge request reports

Loading