On Sat, 10 Feb 2007, Theodore Tso wrote:
What I would propose (post-1.5.0!) is that the policy file be local to
the repository, and consist of an ordered list of regular expressions
and and lists of PGP keys associated with each regexp. So for
example, I might have in my repository a config file which states that
any tag that matches v2.6.[0-9]+ and v2.6.[0-9]+-rc[0-9]+ must be
signed by PGP key 0x76E21CBB (Linus's key).
Actually, I think you can do it already.
I think the "update" hook runs whenever we're pulling a ref, once for each
ref. It might happen just for pushing to a remote, though.
Anyway, with a hook, it's easy enough to just add exactly the kind of
thing you are outlining, and yes, it would be repository-local.
Linus