Commit signing involves augmenting your commit with a cryptographically secure digital ‘signature’ to digitally signature to verify that a commit has been made by a specific user. The Git platform can verify that the signature is authentic, and therefore must've come from the signatory. Some Git platforms will indicate in their user interface that a commit has been signed.

...

Image Added

See also