Sign Your Git Commit with GPG Key "Why do I need to sign my git commit?": Authentication: verifies that one is responsible for the commit. Integrity: create a commit signature that detects post-commit modification. Non-repudiation: prevents one from denying authorship of who signed the commits. Attack mitigation: prevents spoofing. Prerequisites: