The commits submitted by the current action are not signed. When a PR containing such commits is made against a branch that's not main (e.g. a release branch like v2.13.3) there are no issues, but the subsequent PR in the chain that merges the branch into main cannot be merged because of the Commits must have verified signatures rule.