1Password is making it easier for GitHub users to set up signed commits using SSH keys. Signed commits verify that the person making the code change is who they say they are. When code is checked into ...

When you add a security key to SSH operations, you can use these devices to protect you and your account from accidental exposure, account hijacking, or malware, GitHub security engineer Kevin Jones ...

Since normal ssh commands work but git commands don't, I think it's a problem with git-for-windows, somehow. My current workaround is to add IdentityFile tag to ~\.ssh\config pointing to the right key ...