- Tell Git to sign every commit with your SSH key
git config --global gpg.format ssh git config --global user.signingkey ~/.ssh/id_ed25519.pub git config --global commit.gpgsign trueNo SSH key yet? Create one first with the SSH key page.
- Copy the key and add it on GitHub as a Signing Key
pbcopy < ~/.ssh/id_ed25519.pub open https://github.com/settings/ssh/newSet "Key type" to Signing Key. It's separate from the one you use to push.
Check it worked
- Check signing is switched on
git config --global --get commit.gpgsignYou should see true. Your next pushed commit shows "Verified" on GitHub.
Undo it
- Stop signing commits
git config --global --unset commit.gpgsign
- Tell Git to sign every commit with your SSH key
git config --global gpg.format ssh git config --global user.signingkey ~/.ssh/id_ed25519.pub git config --global commit.gpgsign trueNo SSH key yet? Create one first with the SSH key page.
- Show the key, then add it on GitHub as a Signing Key
cat ~/.ssh/id_ed25519.pub xdg-open https://github.com/settings/ssh/newSet "Key type" to Signing Key. It's separate from the one you use to push.
Check it worked
- Check signing is switched on
git config --global --get commit.gpgsignYou should see true. Your next pushed commit shows "Verified" on GitHub.
Undo it
- Stop signing commits
git config --global --unset commit.gpgsign
- Tell Git to sign every commit with your SSH key
git config --global gpg.format ssh git config --global user.signingkey "$env:USERPROFILE\.ssh\id_ed25519.pub" git config --global commit.gpgsign trueNo SSH key yet? Create one first with the SSH key page.
- Copy the key and add it on GitHub as a Signing Key
Get-Content "$env:USERPROFILE\.ssh\id_ed25519.pub" | Set-Clipboard Start-Process "https://github.com/settings/ssh/new"Set "Key type" to Signing Key. It's separate from the one you use to push.
Check it worked
- Check signing is switched on
git config --global --get commit.gpgsignYou should see true. Your next pushed commit shows "Verified" on GitHub.
Undo it
- Stop signing commits
git config --global --unset commit.gpgsign