(List
  (= scope=<EAssignScope.GLOBAL 1> flags=0 words=[] bindings=[('test_description', {[SQ <LIT_CHARS "signed tag tests">]})])
  (Com {[LIT_CHARS .]} {[LIT_CHARS ./test-lib.sh]})
  (Com {[LIT_CHARS .]} {[DQ [VarSub TEST_DIRECTORY][LIT_CHARS /lib-gpg.sh]]})
  (Com {[LIT_CHARS test_expect_success]} {[LIT_CHARS GPG]} {[SQ <LIT_CHARS "create signed tags">]} {[SQ <LIT_CHARS "\n"> <LIT_CHARS "\techo 1 >file && git add file &&\n"> <LIT_CHARS "\ttest_tick && git commit -m initial &&\n"> <LIT_CHARS "\tgit tag -s -m initial initial &&\n"> <LIT_CHARS "\tgit branch side &&\n"> <LIT_CHARS "\n"> <LIT_CHARS "\techo 2 >file && test_tick && git commit -a -m second &&\n"> <LIT_CHARS "\tgit tag -s -m second second &&\n"> <LIT_CHARS "\n"> <LIT_CHARS "\tgit checkout side &&\n"> <LIT_CHARS "\techo 3 >elif && git add elif &&\n"> <LIT_CHARS "\ttest_tick && git commit -m \"third on side\" &&\n"> <LIT_CHARS "\n"> <LIT_CHARS "\tgit checkout master &&\n"> <LIT_CHARS "\ttest_tick && git merge -S side &&\n"> <LIT_CHARS "\tgit tag -s -m merge merge &&\n"> <LIT_CHARS "\n"> <LIT_CHARS "\techo 4 >file && test_tick && git commit -a -S -m \"fourth unsigned\" &&\n"> <LIT_CHARS "\tgit tag -a -m fourth-unsigned fourth-unsigned &&\n"> <LIT_CHARS "\n"> <LIT_CHARS "\ttest_tick && git commit --amend -S -m \"fourth signed\" &&\n"> <LIT_CHARS "\tgit tag -s -m fourth fourth-signed &&\n"> <LIT_CHARS "\n"> <LIT_CHARS "\techo 5 >file && test_tick && git commit -a -m \"fifth\" &&\n"> <LIT_CHARS "\tgit tag fifth-unsigned &&\n"> <LIT_CHARS "\n"> <LIT_CHARS "\tgit config commit.gpgsign true &&\n"> <LIT_CHARS "\techo 6 >file && test_tick && git commit -a -m \"sixth\" &&\n"> <LIT_CHARS "\tgit tag -a -m sixth sixth-unsigned &&\n"> <LIT_CHARS "\n"> <LIT_CHARS "\ttest_tick && git rebase -f HEAD^^ && git tag -s -m 6th sixth-signed HEAD^ &&\n"> <LIT_CHARS "\tgit tag -m seventh -s seventh-signed &&\n"> <LIT_CHARS "\n"> <LIT_CHARS "\techo 8 >file && test_tick && git commit -a -m eighth &&\n"> <LIT_CHARS "\tgit tag -uB7227189 -m eighth eighth-signed-alt\n">]})
  (Com {[LIT_CHARS test_expect_success]} {[LIT_CHARS GPG]} {[SQ <LIT_CHARS "verify and show signatures">]} {[SQ <LIT_CHARS "\n"> <LIT_CHARS "\t(\n"> <LIT_CHARS "\t\tfor tag in initial second merge fourth-signed sixth-signed seventh-signed\n"> <LIT_CHARS "\t\tdo\n"> <LIT_CHARS "\t\t\tgit verify-tag $tag 2>actual &&\n"> <LIT_CHARS "\t\t\tgrep \"Good signature from\" actual &&\n"> <LIT_CHARS "\t\t\t! grep \"BAD signature from\" actual &&\n"> <LIT_CHARS "\t\t\techo $tag OK || exit 1\n"> <LIT_CHARS "\t\tdone\n"> <LIT_CHARS "\t) &&\n"> <LIT_CHARS "\t(\n"> <LIT_CHARS "\t\tfor tag in fourth-unsigned fifth-unsigned sixth-unsigned\n"> <LIT_CHARS "\t\tdo\n"> <LIT_CHARS "\t\t\ttest_must_fail git verify-tag $tag 2>actual &&\n"> <LIT_CHARS "\t\t\t! grep \"Good signature from\" actual &&\n"> <LIT_CHARS "\t\t\t! grep \"BAD signature from\" actual &&\n"> <LIT_CHARS "\t\t\techo $tag OK || exit 1\n"> <LIT_CHARS "\t\tdone\n"> <LIT_CHARS "\t) &&\n"> <LIT_CHARS "\t(\n"> <LIT_CHARS "\t\tfor tag in eighth-signed-alt\n"> <LIT_CHARS "\t\tdo\n"> <LIT_CHARS "\t\t\tgit verify-tag $tag 2>actual &&\n"> <LIT_CHARS "\t\t\tgrep \"Good signature from\" actual &&\n"> <LIT_CHARS "\t\t\t! grep \"BAD signature from\" actual &&\n"> <LIT_CHARS "\t\t\tgrep \"not certified\" actual &&\n"> <LIT_CHARS "\t\t\techo $tag OK || exit 1\n"> <LIT_CHARS "\t\tdone\n"> <LIT_CHARS "\t)\n">]})
  (Com {[LIT_CHARS test_expect_success]} {[LIT_CHARS GPG]} {[SQ <LIT_CHARS "detect fudged signature">]} {[SQ <LIT_CHARS "\n"> <LIT_CHARS "\tgit cat-file tag seventh-signed >raw &&\n"> <LIT_CHARS "\tsed -e \"s/seventh/7th forged/\" raw >forged1 &&\n"> <LIT_CHARS "\tgit hash-object -w -t tag forged1 >forged1.tag &&\n"> <LIT_CHARS "\ttest_must_fail git verify-tag $(cat forged1.tag) 2>actual1 &&\n"> <LIT_CHARS "\tgrep \"BAD signature from\" actual1 &&\n"> <LIT_CHARS "\t! grep \"Good signature from\" actual1\n">]})
  (Com {[LIT_CHARS test_expect_success]} {[LIT_CHARS GPG]} {[SQ <LIT_CHARS "verify signatures with --raw">]} {[SQ <LIT_CHARS "\n"> <LIT_CHARS "\t(\n"> <LIT_CHARS "\t\tfor tag in initial second merge fourth-signed sixth-signed seventh-signed\n"> <LIT_CHARS "\t\tdo\n"> <LIT_CHARS "\t\t\tgit verify-tag --raw $tag 2>actual &&\n"> <LIT_CHARS "\t\t\tgrep \"GOODSIG\" actual &&\n"> <LIT_CHARS "\t\t\t! grep \"BADSIG\" actual &&\n"> <LIT_CHARS "\t\t\techo $tag OK || exit 1\n"> <LIT_CHARS "\t\tdone\n"> <LIT_CHARS "\t) &&\n"> <LIT_CHARS "\t(\n"> <LIT_CHARS "\t\tfor tag in fourth-unsigned fifth-unsigned sixth-unsigned\n"> <LIT_CHARS "\t\tdo\n"> <LIT_CHARS "\t\t\ttest_must_fail git verify-tag --raw $tag 2>actual &&\n"> <LIT_CHARS "\t\t\t! grep \"GOODSIG\" actual &&\n"> <LIT_CHARS "\t\t\t! grep \"BADSIG\" actual &&\n"> <LIT_CHARS "\t\t\techo $tag OK || exit 1\n"> <LIT_CHARS "\t\tdone\n"> <LIT_CHARS "\t) &&\n"> <LIT_CHARS "\t(\n"> <LIT_CHARS "\t\tfor tag in eighth-signed-alt\n"> <LIT_CHARS "\t\tdo\n"> <LIT_CHARS "\t\t\tgit verify-tag --raw $tag 2>actual &&\n"> <LIT_CHARS "\t\t\tgrep \"GOODSIG\" actual &&\n"> <LIT_CHARS "\t\t\t! grep \"BADSIG\" actual &&\n"> <LIT_CHARS "\t\t\tgrep \"TRUST_UNDEFINED\" actual &&\n"> <LIT_CHARS "\t\t\techo $tag OK || exit 1\n"> <LIT_CHARS "\t\tdone\n"> <LIT_CHARS "\t)\n">]})
  (Com {[LIT_CHARS test_expect_success]} {[LIT_CHARS GPG]} {[SQ <LIT_CHARS "verify multiple tags">]} {[SQ <LIT_CHARS "\n"> <LIT_CHARS "\ttags=\"fourth-signed sixth-signed seventh-signed\" &&\n"> <LIT_CHARS "\tfor i in $tags\n"> <LIT_CHARS "\tdo\n"> <LIT_CHARS "\t\tgit verify-tag -v --raw $i || return 1\n"> <LIT_CHARS "\tdone >expect.stdout 2>expect.stderr.1 &&\n"> <LIT_CHARS "\tgrep \"^.GNUPG:.\" <expect.stderr.1 >expect.stderr &&\n"> <LIT_CHARS "\tgit verify-tag -v --raw $tags >actual.stdout 2>actual.stderr.1 &&\n"> <LIT_CHARS "\tgrep \"^.GNUPG:.\" <actual.stderr.1 >actual.stderr &&\n"> <LIT_CHARS "\ttest_cmp expect.stdout actual.stdout &&\n"> <LIT_CHARS "\ttest_cmp expect.stderr actual.stderr\n">]})
  (Com {[LIT_CHARS test_done]})
)