refs/tags/[tag]
reference. If you want to create a lightweight tag, you only have to create the tag reference - this call would be unnecessary.verification
object that describes the result of verifying the commit's signature. The following fields are included in the verification
object:Name | Type | Description |
---|---|---|
verified | boolean | Indicates whether GitHub considers the signature in this commit to be verified. |
reason | string | The reason for verified value. Possible values and their meanings are enumerated in table below. |
signature | string | The signature that was extracted from the commit. |
payload | string | The value that was signed. |
reason
in the verification
object:Value | Description |
---|---|
expired_key | The key that made the signature is expired. |
not_signing_key | The "signing" flag is not among the usage flags in the GPG key that made the signature. |
gpgverify_error | There was an error communicating with the signature verification service. |
gpgverify_unavailable | The signature verification service is currently unavailable. |
unsigned | The object does not include a signature. |
unknown_signature_type | A non-PGP signature was found in the commit. |
no_user | No user was associated with the committer email address in the commit. |
unverified_email | The committer email address in the commit was associated with a user, but the email address is not verified on her/his account. |
bad_email | The committer email address in the commit is not included in the identities of the PGP key that made the signature. |
unknown_key | The key that made the signature has not been registered with any user's account. |
malformed_signature | There was an error parsing the signature. |
invalid | The signature could not be cryptographically verified using the key whose key-id was found in the signature. |
valid | None of the above errors applied, so the signature is considered to be verified. |
curl --location --request POST 'https://api.github.com/repos///git/tags' \
--header 'Content-Type: application/json' \
--data-raw '{
"message": "initial version",
"object": "c3d0be41ecbe669545ee3e94d31ed9a4bc91ee3c",
"tag": "v0.0.1",
"tagger": {
"date": "2011-06-17T14:53:35-07:00",
"email": "octocat@github.com",
"name": "Monalisa Octocat"
},
"type": "commit"
}'
{
"message": "Initial public release",
"node_id": "MDM6VGFnOTQwYmQzMzYyNDhlZmFlMGY5ZWU1YmM3YjJkNWM5ODU4ODdiMTZhYw==",
"object": {
"sha": "string",
"type": "string",
"url": "http://example.com"
},
"sha": "940bd336248efae0f9ee5bc7b2d5c985887b16ac",
"tag": "v0.0.1",
"tagger": {
"date": "string",
"email": "string",
"name": "string"
},
"url": "https://api.github.com/repositories/42/git/tags/940bd336248efae0f9ee5bc7b2d5c985887b16ac",
"verification": {
"payload": "string",
"reason": "string",
"signature": "string",
"verified": true
}
}
Authorization: Bearer ********************
YYYY-MM-DDTHH:MM:SSZ
.commit
but it can also be a tree
or a blob
.【GitHub】API开发者 微信交流群
用微信扫右侧二维码,加入【GitHub】API开发者 交流群 ,互助沟通