sign-commit = true sign-tag = true allow-branch = ["main"]