Security
Signing commits and build artifacts: proving where code came from
Anyone can set their git author name to yours. Signatures let you verify who actually made a commit, and which pipeline produced a release.
Tag
Every story tagged #signing.
Anyone can set their git author name to yours. Signatures let you verify who actually made a commit, and which pipeline produced a release.