I've been signing all of my git commits and tags on GitHub for over six months. Now that some time has passed, I've enabled vigilant mode.

Moving forward, if you see a commit or tag attributed to me that is not signed by me, then I didn't create it.