Example of how to see where commig.gpgsign is set and how it’s overridden/shadowed.

git config --list --show-origin --show-scope | grep commit.gpgsign

References