If you have unsigned commits on a branch, you can re-sign them with your GPG uploaded key. Requires GH CLI, gpg installed.

README.md

The base branch requires all commits to be signed If you need to setup GPG, you can read our helpful guide.

Then once you have:

• gpg installed
• GitHub CLI installed (optional but useful)
• a key generated for your Name and email, in this example: Lantrix myemail@mydomain.com
• your gpg public key uploaded to GitHub
• You can rebase and re-sign all the commits and force push the branch as a potential solution.

rebase-sign-forcepush.sh

git config --global user.name "Lantrix"
git config --global user.email "myemail@mydomain.com" # Needs to match the email address of the GitHub GPG key

gh pr checkout 5190 # Your PR number
git rebase -S -i --rebase-merges master #GPG-sign commits on an interactive rebase - mark all commits to be signed as "edit"
git commit --amend '-S' --author "Lantrix <myemail@mydomain.com>"
git rebase --continue
# For each commit you need to resign
git commit --amend '-S' --author "Lantrix <myemail@mydomain.com>"
git rebase --continue
# Once all marked commits signed
git push --force
gh pr view --web