Signed commits are enforced for all repositories in our GitHub org. Unsigned commits will be rejected. This guide covers signing commits with an SSH key protected by a passphrase.
Follow the GitHub guide: Generating a new SSH key
ssh-keygen -t ed25519 -C "your_email@dhis2.org"