Robuta

https://archlinux.org/packages/extra/any/distribution-gpg-keys/files/
arch linuxgpg keysdistributionfile
https://www.jetbrains.com/help/pycharm/set-up-GPG-commit-signing.html
gpg keyssigncommitspycharmdocumentation
https://www.redhat.com/ja/blog/updating-gpg-keys-for-fedora-and-rhel
The SHA-1 hash function was originally published in 1995. Many researchers have published attacks since then, and the most recent estimate is that an attack...
red hat enterprisegpg keysupdatingfuturefedora
https://simonwillison.net/2019/Dec/5/two-malicious-python-libraries-caught-stealing-ssh-and-gpg-keys/
Nasty. Two typosquatting libraries were spotted on PyPI - targetting dateutil and jellyfish but with tricky variants of their names. They attempted to...
python librariescaught stealinggpg keystwomalicious
https://jfrog.com/help/r/artifactory-how-to-use-gpg-keys-with-artifactory-debian-repositories
gpg keysartifactoryusedebianrepositories
https://jfrog.com/help/r/jfrog-distribution-documentation/upload-and-deploy-gpg-keys?contentId=BHdu9~S~VPnr4zKv0tuc2Q
To create trust between JFrog Distribution, the source Artifactory, and the Edge nodes, you need to run the Upload and Propagate GPG Signing Keys for...
gpg keysuploaddeploy
https://www.jetbrains.com/help/pycharm/2021.2/set-up-GPG-commit-signing.html
gpg keyssigncommitspycharm