It wasn’t very easy to setup GPG signing of commits, so here are the articles that helped me:
https://docs.github.com/en/github/authenticating-to-github/signing-commits
The real subtle thing was I needed to run:
git config --global user.signingkey <signing key value>