tbump should be able to make signed tag #133

.gitignore

@@ -11,3 +11,4 @@ __pycache__
 .mypy_cache/
 
 .vscode
+.idea

tbump.toml

@@ -13,7 +13,7 @@ regex = '''
 
 
 [git]
-message_template  = "Bump to {new_version}"
+message_template = "Bump to {new_version}"
 tag_template = "v{new_version}"
 
 

tbump/config.py

@@ -35,6 +35,7 @@ class Config:
     git_tag_template: str
     git_message_template: str
     atomic_push: bool
+    sign: bool
 
     files: List[File]
     hooks: List[Hook]
@@ -201,6 +202,7 @@ def validate_re(regex: str) -> str:
                 "message_template": str,
                 "tag_template": str,
                 schema.Optional("atomic_push"): bool,
+                schema.Optional("sign"): bool,
             },
             "file": [file_schema],
             schema.Optional("field"): [field_schema],
@@ -296,6 +298,7 @@ def from_parsed_config(parsed: dict) -> Config:
     git_message_template = parsed["git"]["message_template"]
     git_tag_template = parsed["git"]["tag_template"]
     atomic_push = parsed["git"].get("atomic_push", True)
+    sign = parsed["git"].get("sign", False)
     version_regex = re.compile(parsed["version"]["regex"], re.VERBOSE)
     files = []
     for file_dict in parsed["file"]:
@@ -328,6 +331,7 @@ def from_parsed_config(parsed: dict) -> Config:
         git_message_template=git_message_template,
         git_tag_template=git_tag_template,
         atomic_push=atomic_push,
+        sign=sign,
         fields=fields,
         files=files,
         hooks=hooks,

tbump/git_bumper.py

@@ -72,6 +72,7 @@ class GitBumper:
     def __init__(self, options: GitBumperOptions, operations: List[str]):
         self.repo_path = options.working_path
         self.atomic_push = True
+        self.sign = False
         self.tag_message = options.tag_message
         self.tag_template = ""
         self.message_template = ""
@@ -88,9 +89,12 @@ def set_config(self, config: Config) -> None:
         self.message_template = config.git_message_template
         # atomic_push is True by default, and must be explicitely
         # disabled in the configuration:
-        if config.atomic_push is False:
+        if not config.atomic_push:
             self.atomic_push = False
 
+        if config.sign:
+            self.sign = True
+
     def run_git(self, *args: str, verbose: bool = False) -> None:
         return run_git(self.repo_path, *args, verbose=verbose)
 
@@ -160,9 +164,20 @@ def get_commands(self, new_version: str) -> List[Command]:
             else:
                 tag_message = tag_name
 
-            self.add_command(
-                res, "tag", "--annotate", "--message", tag_message, tag_name
-            )
+            if not self.sign:
+                self.add_command(
+                    res, "tag", "--annotate", "--message", tag_message, tag_name
+                )
+            else:
+                self.add_command(
+                    res,
+                    "tag",
+                    "--sign",
+                    "--annotate",
+                    "--message",
+                    tag_message,
+                    tag_name,
+                )
         if "push_commit" in self.operations and "push_tag" in self.operations:
             if self.atomic_push:
                 self.add_command(