What changed, and why it matters
This commit simply adds a new PGP public key for a person named 'gijswijs' to the list of keys used by LND's release verification script. It does not change any code that handles money, network connections, or cryptography beyond registering one more trusted signing key. There is no security vulnerability here.
No action required. Review the key addition through normal project governance if desired, but the change itself is benign.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The diff adds scripts/keys/gijswijs.asc (a PGP public key block) and appends one entry to the KEYS array in scripts/verify-install.sh. The verify-install.sh script uses this list to check release signatures. Adding a key is an administrative/key-management change; it does not introduce a bug, weaken verification logic, or expand trust beyond the existing model where listed keys are accepted.
Changed components
scripts/verify-install.shscripts/keys/gijswijs.ascInspect captured patch +52 / −0
diff --git a/scripts/keys/gijswijs.asc b/scripts/keys/gijswijs.asc
new file mode 100644
index 0000000..485470b
--- /dev/null
+++ b/scripts/keys/gijswijs.asc
@@ -0,0 +1,51 @@
+-----BEGIN PGP PUBLIC KEY BLOCK-----
+
+mQINBGXxd6kBEACX3rx9+yFbnStdm6Jax+7rfy6fizMSn709h1SXzqFGJOvFux4V
+O3wO1xnnSSh0cP9AKIp6ntbppBhlq1J8VmRUu/hi73uyS7i6x9a45WT03vCEil2a
+duJp6Aij5RltAxmBmJcoFa5bcUpj8ZDLxnQsF/A6V8HFQ1ijZfs5GLNVNw9sOeFT
+CHK5NRFVaE2bBAj6npVJK/taGntSQzCAcD8RXHQTIVxHy62tCt5pSeQzEvJsAg5c
+5uFntw/cutwSHBYpeiBeSxtUpAOl8aIEF2/xuxosymImXzyiKYxaD/LCoaw/mjjR
+FAHHES33Mzkg1AS04bLuEQ0LxYEd5pcHrd41+DV2NMJ4TFISh5ecP4SHRjRjYKrO
+BO+Lx0J1seg2BLbJoXa5pToJwl329yYZUayu24GENe6sNiYEDCs3cSURKKZo4olX
+n0g3MdsE9GYUIpZQPQPNjWYr8ExcD5DxUahG1WBRhQDKaDDDsLjaWyX5l4cpBDtA
+R4KTzLZXxeV1vxLsIY1RlF6T7MbGfJPFRluDUOUWVlypbvSYVD9PR5rpUDZBz13g
+3ncqO4bdi7b9Yg4YFTfqqVz4RZAJKGSbmHedjBFiJNkNQg/5pz6LisFlpiCG3d0X
+3Hdo6X/5tRXncdX2E5rZBf6gGYsI/Qr6PyF+CEohNOWYpjrBcGaxys57/QARAQAB
+tClHaWpzIHZhbiBEYW0gPGdpanNAbGlnaHRuaW5nLmVuZ2luZWVyaW5nPokCOAQT
+AQgALAUCZfF3qQkQAZpEhXc1/SACGwMFCR4TOAACGQEECwcJAwUVCAoCAwQWAAEC
+AACYAA/+JAjIWpV1uCnE8/27ceec/8ZVoXqi6hjUny7itqnQa7de5Y4jkDDZTNBh
+epHRSf0/mJmEtmqZtjON6HmBxex4LdvacqeWeVQPcohikr5ZkkuYL+QDAJutImjq
+LqJA2u3nZN9u50rEHVcF2TD7X939I49WyCgdcPs2HKYODPkcBbn1Riw8Zz6BBsQW
+mONXhPMGprrZulrKM/KAVwwvBUf0krnRTRi4X/n7MfXssDjHmv/LVeDmRR+6vPKv
+ri+aiIFwd2mtZnx6mFS9DvMQNwOmabOxT8LPHB6+FKA9o4R/hl7wxKFNVYgtOpxv
+14Sux5w7oBLRXzoxWmaT55hKEQimQEdYl/0y8TF2QNV4XEB7l9H4mTaul3T9z9fV
+mYZOxXSOIywn9xu51K58KLDhyZLlP45nfgFFbgxDl3bLoneD4b8S5uTkUh9yCDZs
+ufpAcGEL+17fuPX6k5KhuldMkXk++dot++NyqEfzwD9op2OBckHzhuAdKg67Y99m
+ZKHNa62dI4S9ma6IHhYdVtrp4xEQtHeHZeALRwSgzNhEbU7zxcMiaBLNLKeaLjXa
+usX5cKSeW7wPHl8g5+SQrDvW3ZyohMwZoO+RBE8hsier/d+wsX6NSHacbtbys/6y
+Em8w4mouEa487wzAWRSO/brmr0txaUuWHQasMZ1DWTOFeP2nw8K5Ag0EZfF3qQEQ
+AMPIbPjPkVcN3Dxs9yJ4B4v9VI9H2Rd/o93f1C9hhULqxX8Y2lOBXU6CPdAUTElC
+baBvu16/w90hnwFjNdxP6n3mVJ4LDgF9Xo+MyvHDmJsHL3SwwNdY96UCino0l5Vd
+v8kUKEWFttmvZRXDjlo8Tpu0b8pGnUATJGQasPI4YQ7qCrr48JGo81SVVf6IJol5
+3svU1z/fsDJ242EdXilWQHKNjnBJd7VZ+DtWaJjv16Zs905XKVxH7+zsyavofyLE
+W1Sv0e78uSHyzXyLuIY/4OdT6LJJ9QuwKYfp4+S4SID/Def7JBMdSh0h9baG0Wzu
+7hVZ6zhnJe3V0LcUcVhoRys58xF5Wpfu+8U6pz2HPN+CJsAD3XHaXBMJjaWIbZ/O
+06OtjI8Y/5870YjjiPAUXo5FpVFBPTX0fft3LoBXIagS3ZOswk0j3TXwf4JgCGAW
+PpIaBQ0C/ZjrOm79B020ArziCEyiiKOXre9vK4pGqz07CQfu/JxrdUdsKlnPEoPF
+z2aYkNaeqa2ivONGvDbBPYIEk+LgbGfV1wtpA1FKHo3Hv66WD5qlOQX+bt9o2lHL
+gZGgngjGxzq0p/VIy0hdLSKTvVfVioNofj7Vvz756k2q/d3saZSGaVzHEJ8lRaOo
+hMVs8/zUuRKx6Ow2KLqKVHl3vt4lLoX74xN1zVXpUyYHABEBAAGJAjUEGAEIACkF
+AmXxd6kJEAGaRIV3Nf0gAhsMBQkeEzgABAsHCQMFFQgKAgMEFgABAgAAquYP/3Xd
+lJ908yJFzuBpVl05MBPGDzTiQNMGt8LDrSdmvqxgtj7+KaXDPbH3wW8GHI3GaweQ
+bhHuMrty2vX5CDuK/hdvwRhZ1WBaGryPtz5rsODhMvqiiGMGBKfSYRdc2thK1L4e
+T4UQa1Kbd5odszwA0Og1y483jjduqq7otJ1MsfzCOhSc6vEzZzaKjHJJPfhIt62U
+4EDhZGGyZ10YiFNsdWc2twJu4ma8a2TxTQLZIPlH61BHuHfZOjf4s9wzoJBjOjPO
+LmIfVfezgJI6rSM30Gr3lnchTd4sg25GUNxEyMrKapo/ztABe+coOzfqy8Kg0sQV
+6s3QvTAOHrEh8oClWX+dY5j00j+pfkdi6gfPT7VEZK4Hqko8UzUy9armBPmdHfcv
+Rx6HoUIZEGfYFgKOdSBoE/Q+4f7hiD5xpHx7FNMQTzI4x9zsMp+8CO4+YZHVSSBA
+r5j4x3Drf86+ZuVmnho4qpHPB2jyBQ6eulYESJE/GWEzuwox7zF1Qe8PPSCkwTux
+UeGCcuxiTGfsCy0dWy+4/1BzF6DkuCxVwPqcQ4r4wxRHWs3Qxii3Cw9wep4Txl1+
+DQD+EtphnXs6LSk3fxI0E50aBcYacDzJ6+NIBlNWkYJ86jAdY4b+x5/qSYWr0NIJ
+ru+oOaGjswGJU1DhmQjt5D7KvgEnE6e9iYMJJBAG
+=r0rf
+-----END PGP PUBLIC KEY BLOCK-----
\ No newline at end of file
diff --git a/scripts/verify-install.sh b/scripts/verify-install.sh
index fc4efe3..cc6670d 100755
--- a/scripts/verify-install.sh
+++ b/scripts/verify-install.sh
@@ -33,6 +33,7 @@ KEYS+=("3E9BD4436C288039CA827A9200C9E2BC2E45666F suheb")
KEYS+=("5F75437E11695F86D50C11BB1AFF9C4DCED6D666 ziggie1984")
KEYS+=("C20A78516A0944900EBFCA29961CC8259AE675D4 ViktorT-11")
KEYS+=("1583B601BB57CC7CD2DF8A87E08DEA9B12B66AF6 georgetsagk")
+KEYS+=("7530B54D5E45A68760E68926019A44857735FD20 gijswijs")
TEMP_DIR=$(mktemp -d /tmp/lnd-sig-verification-XXXXXX)
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.