TIL you don't have to use GPG for git signing. You can use an SSH key as a signing key for git commits. Weirdly enough git still calls it a “GPG” with the format “SSH”

```
git config --global gpg.format ssh
git config --global user.signingkey /PATH/TO/.SSH/KEY.PUB
```

https://docs.github.com/en/authentication/managing-commit-signature-verification/telling-git-about-your-signing-key#telling-git-about-your-ssh-key