Add commit signing template + reorder the config

config.yaml

@@ -10,6 +10,7 @@ groups:
   - name: base
     templates:
       - dep-review
+      - commit-signing
 
   - name: go
     templates:
@@ -21,15 +22,17 @@ groups:
       - go-test
 
 files:
-  - name: go-makefile
-    template_name: go-makefile
-    repo_path: Makefile
+  - name: commit-signing
+    template_name: check-commit-signing.yml
+    repo_path: .github/workflows/check-commit-signing.yml
+    alternate_paths:
+      - .github/workflows/check-commit-signing.yaml
 
-  - name: go-test
-    template_name: go-test.yml
-    repo_path: .github/workflows/go-test.yml
+  - name: dep-review
+    template_name: dependency-review.yml
+    repo_path: .github/workflows/dependency-review.yml
     alternate_paths:
-      - .github/go-test.yaml
+      - .github/workflows/dependency-review.yaml
 
   - name: dependabot
     template_name: dependabot.yml
@@ -43,11 +46,15 @@ files:
     alternate_paths:
       - .github/dependabot.yaml
 
-  - name: dep-review
-    template_name: dependency-review.yml
-    repo_path: .github/workflows/dependency-review.yml
+  - name: go-makefile
+    template_name: go-makefile
+    repo_path: Makefile
+
+  - name: go-test
+    template_name: go-test.yml
+    repo_path: .github/workflows/go-test.yml
     alternate_paths:
-      - .github/workflows/dependency-review.yaml
+      - .github/go-test.yaml
 
   - name: prettier
     template_name: prettierrc.yml

templates/check-commit-signing.yml

@@ -0,0 +1,29 @@
+name: 🚨 Check commit signing
+
+on:
+  push:
+    branches:
+      - long_lived/**
+      - main
+      - release/**
+  pull_request:
+    branches:
+      - "**"
+
+concurrency:
+  group: ${{ github.event_name == 'pull_request' && format('{0}-{1}', github.workflow_ref, github.event.pull_request.number) || github.run_id }}
+  cancel-in-progress: true
+
+jobs:
+  check-commit-signing:
+    name: Check commit signing
+    runs-on: [ubuntu-latest]
+    timeout-minutes: 5
+
+    steps:
+      - name: Checkout Code
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - uses: chia-network/actions/check-commit-signing@main