Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/leosunmo/tagver
Simple binary to get latest Git SHAs/Branch/Tag with no reliance on Git.
https://github.com/leosunmo/tagver
git go
Last synced: about 1 month ago
JSON representation
Simple binary to get latest Git SHAs/Branch/Tag with no reliance on Git.
- Host: GitHub
- URL: https://github.com/leosunmo/tagver
- Owner: leosunmo
- License: mit
- Created: 2020-01-22T21:21:36.000Z (about 5 years ago)
- Default Branch: main
- Last Pushed: 2024-12-16T15:44:38.000Z (about 2 months ago)
- Last Synced: 2025-01-04T04:42:06.080Z (about 1 month ago)
- Topics: git, go
- Language: Go
- Size: 86.9 KB
- Stars: 0
- Watchers: 1
- Forks: 0
- Open Issues: 1
-
Metadata Files:
- Readme: README.md
Awesome Lists containing this project
README
# Tagver
Simple Go binary that allows you to get latest Git SHAs/Tags (annotated or lightweight) and current Branch.
## Usage
```
Usage of tagver: [-t] [-b] [-c] []
Default output is very close to "git describe --tags" if there's a tag present, otherwise defaults to branch and commit:
If HEAD is not tagged: - (example: main-63380731)
If HEAD is tagged: - (example: v1.0.4-63380731)
If HEAD is tagged but has commits after latest tag: -- (example: v1.0.4-1-5227b593)
If "-b" or "-c" are provided with "-t", it is additive and will include commits since tag if unclean.
The number of commits since tag can be ignored with "-ignore-unclean-tag".
Print order will be -[-]-.
Set one or more flags.
-b Return the current branch
-c Return the current commit
-ignore-unclean-tag
Return only tag name even if the latest tag doesn't point to HEAD ("v1.0.4" instead of "v1.0.4-1-5227b593")
-t Return the latest semver tag (annotated or lightweight Git tag)
```
## Output
Default with tag pointing to HEAD:
```
tagver
v1.0.4-63380731
```
Default with commits after latest tag:
```
tagver
v1.0.4-1-5227b593
```
Default with no tags present:
```
tagver
main-63380731
```
Default ignoring the fact that there's commits after the latest tag:
```
tagver --ignore-unclean-tag
v1.0.4-5227b593
```
Only display tag, and ignore any commits after the latest tag:
```
tagver -t --ignore-unclean-tag
v1.0.4
```
All options provided (ignores the fact that latest tag doesn't point to HEAD):
```
tagver -t -b -c
v1.0.4-main-5227b593
```
## Verify signatures and checksums
The releases are signed with [cosign](https://github.com/sigstore/cosign). You can verify the signatures and checksums with the following commands.
First download the files:
```sh
VERSION="1.5.4"
ARCH=x86_64
OS=Linux
# Download the checksums file and associated certificates and signatures.
wget https://github.com/leosunmo/tagver/releases/download/v${VERSION}/checksums.txt
wget https://github.com/leosunmo/tagver/releases/download/v${VERSION}/checksums.txt.pem
wget https://github.com/leosunmo/tagver/releases/download/v${VERSION}/checksums.txt.sig
# Download the tagver binary and associated certificates and signatures.
wget https://github.com/leosunmo/tagver/releases/download/v${VERSION}/tagver_${OS}_${ARCH}.tar.gz
wget https://github.com/leosunmo/tagver/releases/download/v${VERSION}/tagver_${OS}_${ARCH}.tar.gz.pem
wget https://github.com/leosunmo/tagver/releases/download/v${VERSION}/tagver_${OS}_${ARCH}.tar.gz.sig
```
Then verify the signatures and checksums:
```sh
# Verify the checksums.txt file
cosign verify-blob checksums.txt --cert checksums.txt.pem --signature checksums.txt.sig \
--certificate-oidc-issuer https://token.actions.githubusercontent.com \
--certificate-identity-regexp 'https://github\.com/leosunmo/tagver/\.github/workflows/build\.yml@refs/tags/v[0-9]+(\.[0-9]+){2}'
ARCH=x86_64
OS=Linux
# Verify the tagver binary
cosign verify-blob tagver_${OS}_${ARCH}.tar.gz --cert tagver_${OS}_${ARCH}.tar.gz.pem --signature tagver_${OS}_${ARCH}.tar.gz.sig \
--certificate-oidc-issuer https://token.actions.githubusercontent.com \
--certificate-identity-regexp 'https://github\.com/leosunmo/tagver/\.github/workflows/build\.yml@refs/tags/v[0-9]+(\.[0-9]+){2}'
# Verify the checksums
sha256sum --ignore-missing -c checksums.txt
```