### Feature Description The `go-git` signing primitives are being reviewed as part of #1849. The same exercise is needed for the verification counterpart. This issue tracks some of the improvements: - [ ] Provide trustworthy out of tree implementations for essential verifiers (e.g. `ssh` and `X.509`). - [ ] Enable `go-git` implementations to be replaceable.