In this chapterChoose a signing method for your account.
Signed commits show as Verified on hosts.
- SSH signing with the account’s SSH key (GitTrail can add it to GitHub as a signing key).
- GPG signing with one of your GPG keys.
- gitsign (keyless, Sigstore).
- Signing follows the account, and each commit shows whether its signature is verified, untrusted, bad or expired.
Need another approach?Find a fix →