What changed, and why it matters
This commit simply adds a new trusted PGP public key for a person named georgetsagk to the project's release-signature verification script. It is an administrative onboarding change, not a code fix or vulnerability patch. There is no security issue visible in the diff itself.
No security action required. As with any key-onboarding change, project maintainers should confirm out-of-band that the key genuinely belongs to georgetsagk and that the individual is authorized to sign releases.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The change appends one entry to the KEYS array in scripts/verify-install.sh and adds the corresponding ASCII-armored PGP public key file scripts/keys/georgetsagk.asc. The key fingerprint 1583B601BB57CC7CD2DF8A87E08DEA9B12B66AF6 is added alongside existing maintainer keys. This enables the verify-install.sh script to recognize future release signatures made by this key. No cryptographic logic, verification behavior, or trust model is altered beyond adding one authorized key.
Changed components
scripts/verify-install.shscripts/keys/georgetsagk.ascInspect captured patch +53 / −0
diff --git a/scripts/keys/georgetsagk.asc b/scripts/keys/georgetsagk.asc
new file mode 100644
index 0000000..803123b
--- /dev/null
+++ b/scripts/keys/georgetsagk.asc
@@ -0,0 +1,52 @@
+-----BEGIN PGP PUBLIC KEY BLOCK-----
+
+mQINBGLF2RABEADTlKM5TvtsicbWF4WXjX/XHs/TRkp8RWXdNqkMWoIP27nWy24v
+FEL6dU3FNnaPzeHfLS6+SVoOM2ku5X/KdIZoaiejXEN8WBuXz8Ydo05PKMormXDP
+PUDjxdUsO5qrY/1DNQM4+9hKq1f8PrEj95DS6CPp8jlsei1W2BqaSATZNhfgu3Yb
+ruQOlrz4nC1A1WmD5T/YrGWoGbJjziziVgbtLzC0P8cts7Za0cmH99ohkOodPq1N
++vg0J2Dto9S2qBsaNuSD5Vy9jQ1FQFXHE2Z3wPWLJJeHo0Ea5ewdpkWrm8QlIu6A
+RyjGSBkoToOSSez4FPsublthau9ETIsOJv4c9+sJx+tsqP2UazZt4zLucpsMAXBW
+RH9lCpvSK+cMdrTRgD6J3K1gtFToxnPHpVuOQn7tMowGEzSPkEO5zLeXvIm3rsKI
+R9jmpZ0JOn4V5+6HrERyhnffcwRvx8Ce3+btPmHHYfVBD2e3PIODbOfC3Ppw6AXg
+Pfkwr3tUt3JRzqQBhcX3wMB1kFS3G9/6l9IqhK9rFzlEu4bBEIcCLq/ljX012hXj
+EjKOQ372Qo2sVRuerg247RU3RQzw4wsNgecIIgawPo/dzR14EW+K15CIYTuH/MNP
+4hS605Wvdx6ZPzCPm4hBXAgGNK9j2UsxSQKqpxmAqdquF1xgZFrntUwN5QARAQAB
+tDFHZW9yZ2UgVHNhZ2thcmVsaXMgPGdlb3JnZS50c2Fna2FyZWxpc0BnbWFpbC5j
+b20+iQJOBBMBCgA4FiEEFYO2AbtXzHzS34qH4I3qmxK2avYFAmLF2RACGwMFCwkI
+BwIGFQoJCAsCBBYCAwECHgECF4AACgkQ4I3qmxK2avZqwg/9FeJVFGtGBYx5aQIC
+s+chEIx/bWM8oSxy8ruUkmHbK3tUkmzhnYgXdD+mCoN8MFWEGROEOyFip91Ay5v/
+MG1QEI1FgBiaTVODVFgDMTOfuIWq2A45m0QPK6JS0sTkxk9qeekUeyMLjcXaibLU
+sGfEshGxszjWakZjDtEGbRYygWlPTX73faKCeqVxr9hF9OLBC+Ava75yhnm00GI9
+BT9udpkYxeFmFqDAgf/V84KdBV5cMWIAp2/FXl7GFA8phX9i3SfAO3TDSXfxQBQr
+t39rjEQNyc58JG8QTxbgeFaAexykvvUDIjv/jhBSZivzcUAeRn4k+GscMmZEQ7Hw
+tEoEgwKcHsqOwJ3CyCOEEWy9ZN0kVzxCsMLkbWZoQjeFLmIuVaNGkGWjBQJBH4kQ
+WGRLd5d6PIDvHGh2rKIIS4SFL5nZHG1HQocKV001BFZeGt97nNKqDyqxqvp/7TEJ
+Qx0waJOkGayvWT5NGZgGGrMMyBd8jffpzgR8YXI8VgTWJNWlLV4Ousl4p7H7iAQ3
+cODlECqzl376fzv3OAnK31DG3eWCsGairu+upxjugoImXm5QQpWEORYCR57H038i
+v/gAFMIlZLnTS0Dgy0shQQb+Ygr7lqAPkKf3WGfbrt0gxlmXdo6oOoMs6T5RIFDM
+/oigTX6Rla5W3cusBWEL1Gcp12e5Ag0EYsXZEAEQAMmqb9GgFe4PjEVexPh52361
+bJOSv82komNbXoWpGb45lbDFTZID1cTmi5q26AQkP+apkNcfnVTu1cQ4b/uUHj11
+AfSbn5XoYAKx4C/0TaZzSmWHuex6HkPc8eEr2ITyBZw90Z8RD5RnGFntjNsP+5EP
++wXzGTNnIXbP+arMcROv+1Ie7qAkqTXvMAAwFueG/jxJTA+JVvUEriubTcMAWjpy
+5EQKF+NNiUtCdxWxwQvVdnQlUXDYWhux0IECpRXl9VKg/Arcx2vNYz1Q+TX9kPCZ
+5orLfwyXg7Criw5GLHSCpqghLO8VdRuXulpDp58AIuM/+RouMkVhFTNBq69qyB08
+Kh7xM4C6PrmasLVK16fED5AWuW6VKTv4c0CxvJ5XjxpQuXsB+JHQ96Zk97wzDfcN
+rBVTHXsMVQLSibExaU9PgHIZ0nw1Ipf1TA7R+t+iPxrgz9l8gtO2ddgEbpKNeQ37
+IPxx5GKsWIIi9hIJdIJZQVTLikRl6sQLQoFLwKLGu1UtOBDQKw4RyogKTmHcRFKt
+ZdYUfwdhE1p9mUMxYZwloetBpG2qs7y1bzBbYNOaGECoRiSH5c1amFAnrLARXJAe
+xRkgXNKwyBSIH8rizCahHQOFOvmyXyhPb2EuYPzbz8beCJXp/ALKzKSHpqcVuxHc
+j/09NxZW7UtR4Jl758yZABEBAAGJAjYEGAEKACAWIQQVg7YBu1fMfNLfiofgjeqb
+ErZq9gUCYsXZEAIbDAAKCRDgjeqbErZq9vLpD/4xRTqXfGfoiuJV4CH3EYvvKNFJ
+Na1hSBXfmsCCoQ0kAyvFl+5gcmLvFTaII7Kt34lZsVWX0XCWgw6+ofGAZcekcXRR
+swkOUMlmr56/94OrBAR0tG10KOyV3VrVY2n/4VYIymEdcMqQgwCSZ58XagOdYpBs
+k/+limgo325G42LDec7VzR69UGG20QCJ9D3z2z+q5Ogg+tu9/QbzsEmzkmpc7huw
+NFqIJ8TTSSramr+qYhkk9Eh7q0fSlmAuNKGmXvoQzKqAnGbluiFD8lf73G2Xz4Zv
+zk+4AmU3Z70MIWrT+GgDaW5rT0FXrn9zOVafp2y2RqbFAaKSHucb42Qg1h3sgPqS
+Kg/VVir7vECEpSB7ei37d1bTPe29Z6aGyFZeNuZ9J6MwY1fLsbbHwEY1RrGaiD8c
+7gzBiVZl2/Nmuo6JgjnsoQDbs493MIud7dxMTb0ffsM28L0kwrD8EWHSIAY+eTBC
+tNHS+Np24yd0mDNneYvR3+VIkjMWlkpoTqCC1vcCO7qB1sIBE/OEh5bNjjAlYPB2
+v5SKXC65iyoaMUO7IuTJsN+7jd7lKgqhl4OKnj48UQwXUzY9Yrk0OvttcZzXpls/
+OtzViiMG5c1Pacbuqz/PCc1D9AOudOyCYT0fSfsxrAB4GVmKr8kCVWp8BQDktLzk
+Zib+Ntgdwfvr/xKO+A==
+=RMmr
+-----END PGP PUBLIC KEY BLOCK-----
diff --git a/scripts/verify-install.sh b/scripts/verify-install.sh
index f1c5aac..fc4efe3 100755
--- a/scripts/verify-install.sh
+++ b/scripts/verify-install.sh
@@ -32,6 +32,7 @@ KEYS+=("5295A477FFC8064D7057B191FA7E65C951F12439 proofofkeags")
KEYS+=("3E9BD4436C288039CA827A9200C9E2BC2E45666F suheb")
KEYS+=("5F75437E11695F86D50C11BB1AFF9C4DCED6D666 ziggie1984")
KEYS+=("C20A78516A0944900EBFCA29961CC8259AE675D4 ViktorT-11")
+KEYS+=("1583B601BB57CC7CD2DF8A87E08DEA9B12B66AF6 georgetsagk")
TEMP_DIR=$(mktemp -d /tmp/lnd-sig-verification-XXXXXX)
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.