Sign git commits with GPG in GitHub Actions Generate a GPG key (see here) gpg --full-generate-key Save the GPG passphrase to secrets as GPG_KEY_PASSPHRASE