Sign your Git commits

Generate your key

gpg --full-generate-key

follow the wizard, and you should end with seeing the following

...
public and secret key created and signed.

pub   rsa3072 2022-01-03 [SC] [expires: 2022-02-02]
      <your-pub-key>
uid                      <your-id>
sub   rsa3072 2022-01-03 [E] [expires: 2022-02-02]

Configure Git

Take your public key and add is as signing key for Git.

git config --global user.signingkey <your-pub-key>

Make signed commit

git commit -S -m "my commit"

but it gets annoying to remember that -S flag all the time, so you can tell Git to always sign it for you.

git config --global commit.gpgSign true

Get verified on GitHub

Create PGP public kye block

gpg --armor --export <your-pub-key>

and then you’ll need to add it to Github like this.