@Abhisek the commit hash doesn't verify who made the commit. Someone else may add a commit to your repo with your name. But if you signed with your key that only you have then anyone else can verify it with your public key that you sent them before.
↧