GPG-Signed Commits
Signed commits enable confidence in the origin of changes.
Once setup, all signed commits will be marked with a "Verified" tag:
Follow their official tutorial on setting up signed commits.
Windows setup
Setting up on Windows may require more steps. It is strongly recommended to setup WSL2, which is already necessary for Docker.