For completeness' sake, I want to mention that there is also x509 ([1]) for commit signing. In contrast to SSH, CA management tools are more likely to be found. I can't endorse any of the signature formats, because I don't know all the requirements of the Gentoo project ([2]).
[1] https://git-scm.com/docs/gitformat-signature.html [2] https://fedifreu.de/@duxsco/115321926170890562 -- Info on my OpenPGP public key: https://codeberg.org/duxsco/ My accounts: https://keyoxide.org/[email protected]
OpenPGP_signature.asc
Description: OpenPGP digital signature
