This guide walks through best practices of creating a gpg key and signing subkey for the purposes of signing git commits and some brief GitHub instructions.
First, create the primary key with the following config parameters: Ed25519, certify-only, 5-year expiry This primary key is only used to certify/renew subkeys; this key will be moved off the workstation and secured)