you need to get pub key from GitHub via
curl -O https://github.com/web-flow.gpg
gpg --import web-flow.gpg
after that you need to get local id
gpg --list-keys
and sign this key for local trust (GitHub mailto:[email protected])
gpg --lsign-key KEYID