Signature checking is configured via the Kernel command line (also part of the trusted/secure boot chain) using these two settings: To prepare a system for using signatures and correctly signing files ...

Run gitlab pipelines locally as shell executor or docker executor. Get rid of all those dev specific shell scripts and make files.