“If you’re currently using PGP to sign data, you should consider switching to SSH signatures.”
OpenSSH has signed files since 2019 and almost nobody noticed. Everyone already has the keys and the binary. PGP has spent decades proving that a signing tool nobody can use correctly is not a security tool. The replacement was sitting in ~/.ssh the whole time.