Verify commit signatures / Generating a new GPG key

• https://docs.github.com/en/authentication/managing-commit-signature-verification/generating-a-new-gpg-key?platform=linux

• gpg --full-generate-key
• gpg --list-secret-keys --keyid-format=long
• gpg --armor --export
  • gpg --export --armor recipient@example.com > public_key.asc

• gpg --encrypt --recipient recipient@example.com file.txt

• gpg --edit-key user@example.com

Note: When asked to enter your email address, ensure that you enter the verified email address for your GitHub account. To keep your email address private, use your GitHub-provided no-reply email address. For more information, see "Verifying your email address" and "Setting your commit email address."

• Signing commits: git config commit.gpgsign true

Related

• gpg --list-keys
• ~/.gnupg/
• Signing commits
• brew install gpg
• brew install --cask gpg-suite

See also

• gpg, --batch | --generate-key | --full-generate-key | --recv-keys | --export | --encrypt | --import | --list-keys | --list-secret-key | --gen-key | --armor | --dearmor | --send-keys | --search-keys | --quick-set-expire | --keyserver | --delete-keys | --full-generate-key | --armor --export | gpg --help
• GNU Privacy Guard (GPG), gpg, gpg-agent, gpg-suite, GPGAuth, gpg --help, ~/.gnupg/