The current solution for integration with VC (Github) doesn't support commit signing as far as I can tell. When in an org or repo that enforces commit signing, that prevents the PR from being merged into the default branch. A workaround is pulling the branch locally, squashing or rolling back commits, committing so they are signed, and force pushing back to the upstream branch.
It would be great if Retool supported commit signing to avoid the work around.