I believe git tag -s testtools-X.Y.Z is the direct translation. This gets a signed tag. To push the tag though is not automatic - need to use git push --tags origin master
to push both the new tag and the trunk branch up.