Automatic signing

I like this feature within Whonix but is it only verifying .asc pgp files or also sha256sums / sha1? what programs do this - only tor browser or tor and others as well?

All software obtained by apt-get is automatically verified.
Depends on the vendor of the software.