contrib: add nGoline's signing key Changelog-None
What changed, and why it matters
This commit simply adds a new developer's PGP public key to the project's list of trusted signing keys. It is an administrative/key-management change, not a code change, and introduces no security vulnerability.
No security action required. Reviewers may optionally verify the key fingerprint out-of-band with the key owner if key-management policy requires it.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The commit adds Níckolas Goline’s PGP public key (fingerprint A576 56F8 004F 6FD6 8ED9 9C85 BE27 7A87 802A 6F08) to SECURITY.md and creates contrib/keys/ngoline.txt. This is a routine addition of a release-signing key for a project contributor. There is no modification to executable code, cryptographic logic, or security-sensitive behavior.
Changed components
SECURITY.mdcontrib/keys/ngoline.txtInspect captured patch +28 / −0
diff --git a/SECURITY.md b/SECURITY.md
index 58c54d2b..aa26b45c 100644
--- a/SECURITY.md
+++ b/SECURITY.md
@@ -32,6 +32,7 @@ developers, and to validate signatures on releases:
| Sangbida Chaudhuri | `sangbidac@gmail.com` | 1A37 1C2C 3064 5FAA 91AA 6B7D B643 E612 8422 1961 |
| Lagrang3 | `lagrang3@protonmail.com` | C491 5808 7820 7F03 C3B9 66F9 B408 8CD4 608A 7CA1 |
| daywalker90 | `daywalker990@gmx.de` | 8A07 9421 A871 D0B1 0835 1193 7AB4 802E D5A6 39F3 |
+| Níckolas Goline | `n@ngoline.com` | A576 56F8 004F 6FD6 8ED9 9C85 BE27 7A87 802A 6F08 |
You can import a key by running the following command with that individual’s fingerprint:
`gpg --keyserver hkps://keys.openpgp.org --recv-keys "<fingerprint>"`.
diff --git a/contrib/keys/ngoline.txt b/contrib/keys/ngoline.txt
new file mode 100644
index 00000000..81793357
--- /dev/null
+++ b/contrib/keys/ngoline.txt
@@ -0,0 +1,27 @@
+-----BEGIN PGP PUBLIC KEY BLOCK-----
+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+=a8gx
+-----END PGP PUBLIC KEY BLOCK-----
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.