v2.320.0 release commit was unsigned/unverified

[timothyeburke]

Describe the bug

The git commit releasing v2.320.0 was not signed and is unverified on GitHub. This prevents git verify-commit from validating the release integrity of the branch.

Previously, @nebuk89 committed to adding repo rules to enforce this in the future in August. It appears those security rules have not been updated. As of this writing, the last signed release was v2.317.0 in May 2024.

To Reproduce
Navigate to https://github.com/actions/runner/releases, find all recent releases are unsigned.

Expected behavior
The release commit has signature verification.

Runner Version and Platform

Version of your runner? 2.320.0

What's not working?

git verify-commit v2.320.0 fails due to unsigned/unverified commit.

Job Log Output

N/A

Runner and Worker's Diagnostic Logs

N/A