-
ramsey I haven't actually done it (we don't actually enforce verification anywhere), but you'd need a key server to give you the public key side of the keypair (github in this case). There's a
git verify-commit
subcommand, and you'd need to get the key from GH, for that, I think.