Sign agent-made Git commits with gitsign

Apply keyless Sigstore-backed signatures to Git commits so automated changes retain verifiable provenance.

Prerequisites

git, gitsign

Installation

Use the upstream install or setup path that matches your environment:

• brew install gitsign
• go install github.com/sigstore/gitsign@latest

Basic usage or getting-started notes:

• Using Homebrew:

• sh

• Using Go:

• Source: https://github.com/sigstore/gitsign

• Extracted from upstream docs: https://raw.githubusercontent.com/sigstore/gitsign/HEAD/README.md

Documentation

• https://github.com/sigstore/gitsign

Source

• Agent Skill Exchange