Import and trust a public key
To import a public key from another user so you can verify signed git commits.
- Download the public key
- Import key into gpg
gpg --import {keyfile}
- List key to get id
gpg --list-keys
- Edit key
gpg --edit {keyId}
- Trust the key
trust
- Set the level of trust to 5
5
- Clost gpg
quit
You can now verify the git commits.
git verify-commit {comit}
git log --show-signature