Visual Studio Code 1.28.2 and GitHub signed commits using password-protected GPG key

Does anybody know if there's a way to make VS Code ask for the GPG password when signing the commits?

I feel somehow uncomfortable having to use a password-less GPG key to do so.

A bit late, but with the current version of VS Code (1.38) you only have to enable commit signing, by adding this to your settings.json:

"git.enableCommitSigning": true

Or you can open the settings tab, search for "gpg" and activate the checkbox "Enables commit signing with GPG".

If you have a GPG key with password, VS Code opens a separate GUI Window on commit:

See this article about signed commits in VS Code.