"git-tag -s" should create a signed annotated tag