From now on, hutte supports commit signing with GPG.
Using GPG, you can sign tags and commits locally. These tags or commits are marked as verified on GitHub (and other source control hosting) so other people can trust that the changes come from a trusted source.
You can generate your GPG key in your personal settings. Then you need to add your public key to GitHub (or your source control hosting).