Once you've set up your GPG key and associated it with your GitHub account and Git, you can sign tags.
Note: GitHub Desktop does not support GPG signing.
To sign a tag, add
git tag -s mytag # Creates a signed tag
Verify your signed tag it by running
git tag -v [tag-name].
git tag -v mytag # Verifies the signed tag