Here's a signed commit I pushed in January to see if they'd recognise it:

https://github.com/fincham/test-signed-repo/commit/9d6e807d9...

Now shows a little "Verified" badge. Very nice!