Troubleshooting commit signature verification

You may need to troubleshoot unexpected issues that arise when signing commits locally for verification on GitHub.

Checking your commit and tag signature verification status

You can check the verification status of your commit and tag signatures on GitHub.

Using a verified email address in your GPG key

When verifying a signature, GitHub checks that the committer or tagger email address matches an email address from the GPG key's identities and is a verified email address on the user's account. This ensures that the key belongs to you and that you created the commit or tag.