#1023140 uscan: please add support for git tags signed with an SSH key

Package:
devscripts
Source:
devscripts
Description:
scripts to make the life of a Debian Package maintainer easier
Submitter:
Louis-Philippe Véronneau
Date:
2025-08-18 07:41:01 UTC
Severity:
normal
#1023140#5
Date:
2022-10-30 15:52:57 UTC
From:
To:
Dear maintainers,

The latest upstream version of python-mediafile (10.0.1)[1] switched
from signing the git tag with an OpenPGP key to doing it an SSH key.

Would it be possible to add support for this in uscan?

I would be very nice to be able to have an SSH public key in d/upstream/
and d/watch file that looks like this:
---------------
version=4
opts="mode=git, pgpmode=sshtag, uversionmangle=s/v//" \
https://github.com/beetbox/mediafile.git \
refs/tags/([v\d\.]+)
---------------

Cheers,

[1]: https://github.com/beetbox/mediafile/releases/tag/v0.10.1
#1023140#10
Date:
2025-08-18 07:39:36 UTC
From:
To:
Dear Maintainers,

The same happened with python-argon2 and python-argon2-cffi-bindings:
upstream switched from GPG keys to SSH keys for signing tags. Since
uscan only supports GPG verification, we currently lose automatic
authenticity checks for new releases.


Best,