git-evtag - Man Page

git evtag sign [Options...] {TAGNAME}

git evtag verify [Options...] {TAGNAME}

While git can use GPG to sign tags and commits, it only covers a commit object, which is subject to SHA1 weaknesses. This tool uses SHA512 across the entire content of a tag, creating a stronger level of assurance.

See the subcommand help, e.g. git-evtag sign --help.