Git supports signing content with GPG, S/MIME and since recently with SSH keys.
Tuleap extracts commit signature but the code is only covers the GPG signatures. While we should not encounter differences, updating the code and tests to make it clear that we might encounter something than GPG signatures would not hurt.