What are signed commits (git commit -S), and why use them? Follow:

Signed commits ensure authenticity — they’re cryptographically verified with a GPG

or SSH key, proving the commit really came from you and wasn’t tampered with.

Setup:

Generate a GPG key:

gpg --full-generate-key