Signing git commits will help verify that they come from a trusted source. This prevents a commit author from pretending to be someone else.
$ gpg --list-secret-keys --keyid-format LONG
- If GPG keys do not exist, generate a new GPG key
- Else, add it to your GitHub account