GPG Signature for Copilot Workspace commits

[indcoder]

Hi,

My usual workflow for UX heavy tasks using Copilot Workspace is to create a draft PR and continue and refine the UX on my workstation.

While I can codesign my workstation commits on workstation, the CoPilot workspace does not. Usually, to ensure Supply Chain Mgmt [SCM] workflow hygiene, we need to ensure all code commits are verifiably signed.