If one looks at how a pgp signature is added to a git commit object, we see that it’s added by inserting the PEM encoded signature right on the next line after the header: