Roave / composer-gpg-verify

        );

    }

    private static function checkCurrentCommitSignature(

        string $gitDirectory,

        PackageInterface $package

    ) : GitSignatureCheck {

        $command = sprintf(

            'git --git-dir %s verify-commit --verbose HEAD 2>&1',

            escapeshellarg($gitDirectory)

        );

        exec($command, $output, $exitCode);

        return GitSignatureCheck::fromGitCommitCheck($package, $command, $exitCode, implode("\n", $output));

    }

    /**

     * @param string $gitDirectory

    private static function checkTagSignatures(string $gitDirectory, PackageInterface $package, string ...$tags) : array

    {

        return array_map(

            function (string $tag) use ($gitDirectory, $package) : GitSignatureCheck {

                $command = sprintf(

                    'git --git-dir %s tag -v %s 2>&1',

                    escapeshellarg($gitDirectory),

                    escapeshellarg($tag)

                );

                exec($command, $tagSignatureOutput, $exitCode);

                return GitSignatureCheck::fromGitTagCheck(

                    $package,

                    $command,

                    $exitCode,

                    implode("\n", $tagSignatureOutput)

                );

            },

            $tags

        );

    }