There is certainly a lot of value to provide a system that is easy to use for developers from commits to the distribution. There does not seem to be a simple solution to do that.

Def check out the gitsign project mentioned in the post: https://github.com/sigstore/gitsign