You can use SSH keys to sign stuff!
IDNKT (I did not know that) but ssh-keygen can encrypt and sign files and other arbitrary stuff (including, eventually git stuff). See https://www.agwa.name/blog/post/ssh_signatures for more info
You can use SSH keys to sign stuff! Read More ยป