What alternative to GnuPG has a compatible interface (for use by Git) and does not leave behind an active lock (like pubring.db.lock) when something crashes?
What alternative to GnuPG has a compatible interface (for use by Git) and does not leave behind an active lock (like pubring.db.lock) when something crashes?
Alternative to GPG
You can sign git commits using SSH keys, including the one you use to connect to GitHub/GitLab/Codeberg. These sites also support verifying the signature.
Combine that with Bitwarden running as the SSH Agent [1] and you've got yourself a decent, secure way to sign commits, etc.
[1] https://bitwarden.com/help/ssh-agent/
Or 1password if that's your bag, I use 1password at work and bitwarden at home