Alternative to GPG
You must log in or register to comment.
You can sign git commits using SSH keys, including the one you use to connect to GitHub/GitLab/Codeberg. These sites also support verifying the signature.
Combine that with Bitwarden running as the SSH Agent [1] and you’ve got yourself a decent, secure way to sign commits, etc.
Or 1password if that’s your bag, I use 1password at work and bitwarden at home
