Once you've set up your GPG key and associated it with your GitHub account and Git, you can sign tags.

Note: GitHub Desktop does not support GPG signing.

  1. To sign a tag, add -s to your git tag command.

    git tag -s mytag
    # Creates a signed tag
  2. Verify your signed tag it by running git tag -v [tag-name].

    git tag -v mytag
    # Verifies the signed tag

Further reading