I think you can sign git commits with a yubikey [1]. I haven’t done it myself; I use Apple’s keychain for my ssh keys.

[1] https://nuculabs.dev/2018/06/30/how-to-sign-git-commits-with...