Harness the power of signify(1) to sign arbitrary git objects
avoid overwriting sigs
+4
-3
+4
-3
src/sign.rs
+4
-3
src/sign.rs
···
21
21
let reference = utils::craft_signature_reference(key_fingerprint, signed_object);
22
22
repo.reference(
23
23
&reference, tree_oid,
24
-
// references to signatures will never change, so it is
25
-
// safe to force overwriting faulty references
26
-
true, "",
24
+
// references to signatures are non-deterministic,
25
+
// so we should fail if we attempt to overwrite a
26
+
// signature in our local git repository
27
+
false, "",
27
28
)
28
29
.context("Failed to store reference to signature")?;
29
30
println!("Signed with key:");