Sign Git Commits With SSH Keys
Git & GitHub Setup for Signed Commits & Verification
I recently had to set this up for work and found it all a bit hard to navigate, so I wrote this up. Hope it helps!
https://scratchbuffer.net/topics/developer-tools/git-commit-sign-ssh/