gitlab GPG key used to sign GitLab package repositories' metadata has been extended (opens in new tab) gitlabdevsecopsgpgpackage-repositoriessecurity-policiesmetadata-signing
gitlab gitlab