✅ GitHub Action for creating signed and verified bot commits

Sign commits through the GitHub/GitLab web UI

🖋️ Create a signed commit with GitHub Actions.

Script to import GPG Public Keys for validating signed commits on GitHub

A signed commit is one where the author of the commit has digitally signed the commit using a GPG key. This digital signature confirms that the author of the commit is who they say they are and that the code has not been tampered with since it was committed.

How to create your GPG key, import it and sign your commits.