Feature Description

go-git exposes primitives that enable users to sign and verify Commit and Tag objects for some time now. However, users are required to implement their own signer logic. This gets a bit more complicated when they also aim to provide parity with git for a given repository.

This issue tracks a few improvements:

• Provide trustworthy out of tree implementations for essential signers (e.g. ssh and X.509.
• Enable in-tree implementations to be replaceable with out-of-tree options.
• Support for detecting what signer type is required for a given repository, based on its materialised Git config.

Follow-up from:

• Add crypto.Signer option to CommitOptions. #996
• plumbing: support SSH/X509 signed tags #690
• git: Clean up API around signing commits and tags #1847