signing_with_secretive.sh

brew install git openssh secretive # open a new terminal after

# Grab the path from Secretive's UI
git config --global user.signingkey /Users/YOURNAMEHERE/Library/Containers/com.maxgoedjen.Secretive.SecretAgent/Data/PublicKeys/YOURKEYHERE.pub
git config --global gpg.format ssh
git config --global commit.gpgSign true
git config --global tag.gpgSign true
git config --global tag.forceSignAnnotated true

# This is a bit redundant for most attack vectors, but let's keep it to be safe anyway.
git config --global push.gpgSign if-asked


# Test out file signing

echo "Hello World" > demo.txt

ssh-keygen -Y sign -f /Users/YOURNAMEHERE/Library/Containers/com.maxgoedjen.Secretive.SecretAgent/Data/PublicKeys/YOURKEYHERE.pub -n file demo.txt

# You now have demo.txt.sig