From 2c9651879086c94565710cf3456748730429adf7 Mon Sep 17 00:00:00 2001
From: Ned Batchelder <ned@nedbatchelder.com>
Date: Fri, 26 Jan 2024 09:26:00 -0500
Subject: [PATCH] build: tags should be signed

-a was signing them before because I was signing all commits.  Now that
I am not, we want -s to ensure the tag is signed.
---
 Makefile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/Makefile b/Makefile
index 0a88052d4..52a6c4cce 100644
--- a/Makefile
+++ b/Makefile
@@ -223,7 +223,7 @@ check_kits:				## Check that dist/* are well-formed.
 	@echo $$(ls -1 dist | wc -l) distribution kits
 
 tag:					## Make a git tag with the version number.
-	git tag -a -m "Version $$(python setup.py --version)" $$(python setup.py --version)
+	git tag -s -m "Version $$(python setup.py --version)" $$(python setup.py --version)
 	git push --follow-tags
 
 bump_version:				## Edit sources to bump the version after a release.