Import and trust a public key
To import a public key from another user so you can verify signed git commits.
- Download the public key
- Import key into gpg
gpg --import {keyfile} - List key to get id
gpg --list-keys - Edit key
gpg --edit {keyId} - Trust the key
trust - Set the level of trust to 5
5 - Clost gpg
quit
You can now verify the git commits.
git verify-commit {comit}
git log --show-signature