From 99cb36238d0f8103a361275deee69d2a212aebbf Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Re=C5=9Fat=20SABIQ?= Date: Sat, 4 Apr 2020 15:31:39 +0600 Subject: [PATCH] doc: advise users to import the full set of trusted release keys PR-URL: https://github.com/nodejs/node/pull/32655 Fixes: https://github.com/nodejs/node/issues/32559 Reviewed-By: James M Snell Reviewed-By: Rich Trott Reviewed-By: Myles Borins --- README.md | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/README.md b/README.md index bb31540bc0eb41..2d0e58655810a9 100644 --- a/README.md +++ b/README.md @@ -602,7 +602,8 @@ Primary GPG keys for Node.js Releasers (some Releasers sign with subkeys): * **Shelley Vohr** <shelley.vohr@gmail.com> `B9E2F5981AA6E0CD28160D9FF13993A75599653C` -To import the full set of trusted release keys: +To import the full set of trusted release keys (including subkeys possibly used +to sign releases): ```bash gpg --keyserver pool.sks-keyservers.net --recv-keys 4ED778F539E3634C779C87C6D7062848A1AB005C