feat(bump): add signed tag support for bump command

Author: gpongelli

commitizen/cli.py

@@ -160,6 +160,12 @@
                         "help": "create annotated tag instead of lightweight one",
                         "action": "store_true",
                     },
+                    {
+                        "name": ["--signed-tag", "-st"],
+                        "help": "sign tag instead of lightweight one",
+                        "default": False,
+                        "action": "store_true",
+                    },
                     {
                         "name": ["--changelog-to-stdout"],
                         "action": "store_true",

commitizen/commands/bump.py

@@ -41,6 +41,7 @@ def __init__(self, config: BaseConfig, arguments: dict):
                     "increment",
                     "bump_message",
                     "annotated_tag",
+                    "signed_tag",
                 ]
                 if arguments[key] is not None
             },
@@ -233,6 +234,8 @@ def __call__(self):  # noqa: C901
             new_tag_version,
             annotated=self.bump_settings.get("annotated_tag", False)
             or bool(self.config.settings.get("annotated_tag", False)),
+            signed=self.bump_settings.get("signed_tag", False)
+            or bool(self.config.settings.get("signed_tag", False)),
         )
         if c.return_code != 0:
             raise BumpTagFailedError(c.err)

commitizen/git.py

@@ -1,3 +1,4 @@
+import re
 import os
 from pathlib import Path
 from tempfile import NamedTemporaryFile
@@ -58,8 +59,13 @@ def from_line(cls, line: str, inner_delimiter: str) -> "GitTag":
         return cls(name=name, rev=obj, date=date)
 
 
-def tag(tag: str, annotated: bool = False) -> cmd.Command:
-    c = cmd.run(f"git tag -a {tag} -m {tag}" if annotated else f"git tag {tag}")
+def tag(tag: str, annotated: bool = False, signed: bool = False) -> cmd.Command:
+    _opt = ""
+    if annotated:
+        _opt = f"-a {tag} -m"
+    if signed:
+        _opt = f"-s {tag} -m"
+    c = cmd.run(f"git tag {_opt} {tag}")
     return c
 
 
@@ -136,6 +142,14 @@ def tag_exist(tag: str) -> bool:
     return tag in c.out
 
 
+def is_signed_tag(tag: str) -> bool:
+    c = cmd.run(f"git tag -v {tag}")
+    _ret = False
+    if re.match("gpg: Signature made [0-9/:A-Za-z ]*", c.err):
+        _ret = True
+    return _ret
+
+
 def get_latest_tag_name() -> Optional[str]:
     c = cmd.run("git describe --abbrev=0 --tags")
     if c.err: