GPG

Let’s setup commit verification using GPG on Windows. This will prompt us to sign the commit. I will be using a passphrase instead of signing the commits with my SSH token. This gives an extra layer of security to the setup.

In this blog we’ll explore how to combine GitHub, git, SSH, GPG and DevContainers on Windows in such a way that we can interact with GitHub from our DevContainer just as we would from our dev box. We’ll use our bot-zero project as an example.