Currently we sign our APT repository packages only. It would be nice to sign GitHub releases with GPG, too.