You can sign tags locally using GPG.
Note: GitHub Desktop does not support commit signing.
-
To sign a tag, add
-s
to yourgit tag
command.git tag -s mytag # Creates a signed tag
-
Verify your signed tag it by running
git tag -v [tag-name]
.git tag -v mytag # Verifies the signed tag