From 343453175a6d5378bd40c2a9aaa9500e4f2f6b56 Mon Sep 17 00:00:00 2001
From: Huw Jones <huw@pexip.com>
Date: Tue, 14 Mar 2023 10:32:28 +0000
Subject: repository.create_tag: Explicitly don't sign when sign=False

This avoids `tag.gpgsign = true` from git-config leaking through.

Closes: #1032932
---
 gbp/git/repository.py | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/gbp/git/repository.py b/gbp/git/repository.py
index edbdfe9f..a8b4073e 100644
--- a/gbp/git/repository.py
+++ b/gbp/git/repository.py
@@ -686,6 +686,8 @@ class GitRepository(object):
         if sign:
             args += ['-s']
             args += ['-u', keyid] if keyid else []
+        else:
+            args += ['--no-sign']
         args += [name]
         args += [commit] if commit else []
         self._git_command("tag", args)
-- 
cgit v1.2.3