Commit signature GPG verification

[rochertov]

Hello,
I was wondering about the possibility about enabling GPG signature verification for this package.
https://docs.github.com/en/github/authenticating-to-github/managing-commit-signature-verification It should be a fairly straight forward process, and will make it easier for various companies (in my case Arista) to conduct security audits of OSS code.

Roman

[kcudnik]

could you prepare PR for that ?

[rochertov]

How can this be a PR? I thought that only the repository maintainers could enable this in GitHub.

[kcudnik]

oh, then i dont have enough knowledge about this, @lguohan, could you take a look?