It's nice to see a Verified message next to each commit for peace of mind.
Using GPG or S/MIME, you can sign tags and commits locally. These tags or commits are marked as verified on GitHub so other people can be confident that the changes come from a trusted source.
-
Install latest
gpg
If using a mac use homebrew