Git Commit Signing
create key
ssh-keygen -o -a 100 -t ed25519 -f ~/.ssh/signing -C "signing"
touch ~/.ssh/allowed_signers
allowed_signers
add the public key
cat ~/.ssh/signing.pub >> ~/.ssh/allowed_signers
repo
git config commit.gpgsign true
git config gpg.format ssh
git config gpg.ssh.allowedSignersFile "~/.ssh/allowed_signers"
git config tag.forceSignAnnotated true
git config tag.gpgsign true
git config user.email example@example.com
git config user.name example
git config user.signingkey ~/.ssh/signing.pub
verify
git log --show-signature