Github allows you to sign commits with your SSH keys. Having the public keys available publicly means anyone can verify the signature: https://docs.github.com/en/authentication/managing-commit-si...