https://devopsauthority.tech/2020/07/18/why-you-need-to-be-using-gpg-signed-commits/