@jasonkarns @homebrew i would personally recommend it! IME ssh-based signing is a lot less brittle, although if you've already gone through the hoops of signing with a yubikey then the advantages might not be as immediate. (i used GPG commit signing for a very long time, but now i use 1password's ssh-agent on macOS and the normal ssh-agent on Linux with a small password manager integration to hold my secret key. makes things very easy!)