{"meta":{"title":"Managing commit signature verification","intro":"GitHub will verify GPG, SSH, or S/MIME signatures so other people will know that your commits come from a trusted source.","product":"Authentication","breadcrumbs":[{"href":"/en/enterprise-cloud@latest/authentication","title":"Authentication"},{"href":"/en/enterprise-cloud@latest/authentication/managing-commit-signature-verification","title":"Verify commit signatures"}],"documentType":"category"},"body":"# Managing commit signature verification\n\nGitHub will verify GPG, SSH, or S/MIME signatures so other people will know that your commits come from a trusted source.\n\n## Links\n\n### Sign your commits with GPG\n\n* [About commit signature verification](/en/enterprise-cloud@latest/authentication/managing-commit-signature-verification/about-commit-signature-verification)\n\n  Using GPG, SSH, or S/MIME, you can sign tags and commits locally. These tags or commits are marked as verified on GitHub so other people can be confident that the changes come from a trusted source.\n\n* [Checking for existing GPG keys](/en/enterprise-cloud@latest/authentication/managing-commit-signature-verification/checking-for-existing-gpg-keys)\n\n  Before you generate a GPG key, you can check to see if you have any existing GPG keys.\n\n* [Generating a new GPG key](/en/enterprise-cloud@latest/authentication/managing-commit-signature-verification/generating-a-new-gpg-key)\n\n  If you don't have an existing GPG key, you can generate a new GPG key to use for signing commits and tags.\n\n* [Adding a GPG key to your GitHub account](/en/enterprise-cloud@latest/authentication/managing-commit-signature-verification/adding-a-gpg-key-to-your-github-account)\n\n  To configure your account on GitHub to use your new (or existing) GPG key, you'll also need to add the key to your account.\n\n* [Telling Git about your signing key](/en/enterprise-cloud@latest/authentication/managing-commit-signature-verification/telling-git-about-your-signing-key)\n\n  To sign commits locally, you need to inform Git that there's a GPG, SSH, or X.509 key you'd like to use.\n\n* [Associating an email with your GPG key](/en/enterprise-cloud@latest/authentication/managing-commit-signature-verification/associating-an-email-with-your-gpg-key)\n\n  Your GPG key must be associated with a verified email that matches your committer identity.\n\n* [Signing commits](/en/enterprise-cloud@latest/authentication/managing-commit-signature-verification/signing-commits)\n\n  You can sign commits locally using GPG, SSH, or S/MIME."}