Use GPG to Sign Commits

gpg.md

1 - GPG tools install: https://gpgtools.org/

2 - Generate a new GPG key for your GitHub email

3 - Add key to git on your local machine: git config --global user.signingkey MYKEY

4 - Configure git to sign all commits: git config --global commit.gpgsign true

5 - Add the following to the bottom of your ~/.gnupg/gpg.conf:

no-tty
use-agent

6 - Export key: gpg --armor --export MYKEY

7 - Add key to your GitHub account profile settings