Use GPG to sign commits using git & PHPStorm

gpg.md

1 - install GPG tools : https://gpgtools.org/

2 - Create new key for your github email

3 - Add key to git on your local machine: git config --global user.signingkey YOURKEY

4 - configure git to sign all commits: git config --global commit.gpgsign true

5 - add to the bottom of ~/.gnupg/gpg.conf: (create the file if it not exists)

no-tty
use-agent

6 - Add key to you're github profile settings: gpg --armor --export YOURKEY

To make it not so github specific you should publish your key to a keyserver https://www.gnupg.org/gph/en/manual/x457.html

Very nice! Helped me a lot 👍

Note: git config --global commit.gpgsign true only works in git >= 2.0.0.

This works great 👍, but it helps to know that, for me, YOURKEY meant the Key ID from inside GPG Tools.

@stefanvangastel dude, you saved my life, I was trying gpgsign multiple times and all failed, as I had 1.9 git version 👍

what is this? 5 - add to the bottom of ~/.gnupg/gpg.conf: i dont have that file

Worked for me. Thanks 👍

what is this? 5 - add to the bottom of ~/.gnupg/gpg.conf: i dont have that file

You need to create the file. I had to create it.

@venux92 That is correct!
I've added this to the gist!

Thank you! Worked for me, too!

for Mac user:

1. Run brew install pinentry-mac
2. Add pinentry-program /opt/homebrew/bin/pinentry-mac to ~/.gnupg/gpg-agent.conf
3. Restart gpg-agent by running killall gpg-agent

for Mac user:

1. Run brew install pinentry-mac
2. Add pinentry-program /opt/homebrew/bin/pinentry-mac to ~/.gnupg/gpg-agent.conf
3. Restart gpg-agent by running killall gpg-agent

It works for me. Thanks a lot. @matriphe