Commit signature

Commits should be signed in order to ensure trust and verification of source.

The repository flag Require signed commits (Settings > Branches) should be considered on relevant branches.