Act archived

GitHub CLI Linux package signing key expires September 5

2026-09-04 14:38 UTC · GitHub Changelog · read the source ↗ #github-cli #package-signing #linux

Platform/SRE — Act: The PGP signing key for GitHub CLI APT/RPM repos expires 2026-09-05; any managed Linux host that auto-installs or updates gh via apt/rpm will fail package-signature verification on the first release after that date. Update the trusted keyring on those hosts today.
CI/CD — Act: Pipelines that install gh on Linux runners via apt or rpm will break signature verification starting with the first release after 2026-09-05; update the keyring import step in CI configs, runner setup scripts, or Dockerfiles immediately to add the new PGP key before pipelines go red.
Leader — Skip

This entry was curated and judged by AI (Claude) with automated enrichment (CISA KEV / EPSS / public PoC). Verify against the original source before acting. Found a bad verdict? Report it — confirmed errors go to the corrections log.