signature of the commits
Summary
A commit being merged should be signed.The signature of the commits comes into play in the security of the supply chain of Sylva.
related references
https://fluxcd.io/flux/components/source/gitrepositories/#verification