Request to enable commit signature verification for repository

[a-coggins]

Hello,

This repository currently does not use verified commits. For organizations with strict supply chain security policies—including ours—this presents a compliance issue. We require all GitHub Actions dependencies to originate from repositories with verified commits to ensure integrity and traceability.

Please consider enabling commit signing for this repository.

Thank you.

[humphreyn]

With the number of attacks against organisations and institutions rising, many now have security as their number one priority. The result of which many are now putting in place stringent security policies when using third party software.

I'd like to up vote this request becuase without it we cannot use this library