We can use the following 2 semantic-release plugins
[
"@semantic-release/changelog",
"@semantic-release/git"
]
but we will need to configure the changelog plugin to sign commits with gpg. There's a section in the readme on this.
Because of the relative complexity that gpg signing adds, this has been cut from the initial scope of configuring semantic-release (#36)