Comment Comment by chrisseaton Says it signs the commit with its own key. I guess you have to trust GitHub. parent chrisseaton 5 years ago