docs: add manual PGP key verification commands

Signed-off-by: Babak K. Shandiz <babakks@github.com>
This commit is contained in:
Babak K. Shandiz 2026-04-08 13:06:01 +01:00
parent 2eceb3908c
commit 1f94ee4c58
No known key found for this signature in database
GPG key ID: 9472CAEFF56C742E

View file

@ -41,10 +41,10 @@ sudo apt install gh
```
> [!TIP]
> To verify downloaded PGP keys, you can run this and match the listed fingerprints with those at the top of this document:
> To verify PGP keys before installing `gh`, you can run this and match the listed fingerprints with those at the top of this document:
>
> ```shell
> gpg --show-keys /etc/apt/keyrings/githubcli-archive-keyring.gpg
> curl -fsSL -o - https://cli.github.com/packages/githubcli-archive-keyring.gpg | gpg --show-keys
> ```
### RPM
@ -62,6 +62,12 @@ These packages are supported by the GitHub CLI maintainers with updates powered
> [!TIP]
> During installation, you may be prompted to confirm the import of PGP keys. You can verify the keys with the list of fingerprints at the top of this document.
>
> To verify the PGP keys before installing `gh`, you can run the following command and match the listed fingerprints with those at the top of this document:
>
> ```shell
> curl -fsSL -o - https://cli.github.com/packages/githubcli-archive-keyring.asc | gpg --show-keys
> ```
#### DNF5