kata-setup-gpg-signing

What problem does it solve?

It prevents your GitHub commits and tags from showing as unverified by ensuring your Git client is configured to sign them with a GPG key that matches your GitHub account.

Core Features & Use Cases

• Create and manage a GPG signing key: Generates a strong key and identifies the key ID needed for Git configuration.
• Configure Git for commit and tag signing: Sets the signing key and turns on automatic signing for commits and tags.
• Verify signatures locally and on GitHub: Confirms correct configuration using signature display in logs and the Verified badge on GitHub.

Use case example: You want every commit you push to Guardia repositories to display a Verified status so collaborators and reviewers can trust the author identity.

Quick Start

Run the kata steps to generate a GPG key, set git config user.signingkey plus commit.gpgsign and tag.gpgSign, then verify by creating an empty test commit and checking its signature output.