On GitHub:?
You’ll see a green “Verified” badge on signed commits.
Why it matters:
- Verifies authorship for open-source contributions.
- Helps in regulated environments (e.g., fintech, healthcare).
- Prevents supply chain attacks via spoofed commits.
Real-world example:
In a security-conscious org, all commits to the main branch are required to be
GPG-signed — GitHub enforces this with branch protection rules.