# repository key management

Published articles for repository key management.

This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles.

## Inside the OpenSSF Summer Mentorship Showcase: How Emerging Developers Are Strengthening Supply Chain Security

DevFeed: [Inside the OpenSSF Summer Mentorship Showcase: How Emerging Developers Are Strengthening Supply Chain Security](<https://devfeed.tech/articles/inside-the-openssf-summer-mentorship-showcase-how-emerging-developers-are-strengthening-supply-chain-security-59588.md>)

Original publisher: [Read original article](<https://openssf.org/blog/2026/09/24/inside-the-openssf-summer-mentorship-showcase-how-emerging-developers-are-strengthening-supply-chain-security/>)

Author: OpenSSF

Published: 2026-09-24T19:32:24Z

Content type: article

Language: en

Sources: [Open Source Security Foundation](<https://devfeed.tech/sources/open-source-security-foundation.md>)

Topics: [openssf](<https://devfeed.tech/topics/openssf.md>), [supply-chain-security](<https://devfeed.tech/topics/supply-chain-security.md>), [open-source-security](<https://devfeed.tech/topics/open-source-security.md>), [Open Source](<https://devfeed.tech/topics/open-source.md>), [Security](<https://devfeed.tech/topics/security.md>), [Cryptography](<https://devfeed.tech/topics/cryptography.md>), [Repository](<https://devfeed.tech/topics/repository.md>), [trust](<https://devfeed.tech/topics/trust.md>)

Tags: [blog](<https://devfeed.tech/tags/blog.md>), [cryptography](<https://devfeed.tech/tags/cryptography.md>), [developers](<https://devfeed.tech/tags/developers.md>), [lfx-mentorship](<https://devfeed.tech/tags/lfx-mentorship.md>), [open-source](<https://devfeed.tech/tags/open-source.md>), [open-source-security](<https://devfeed.tech/tags/open-source-security.md>), [open-source-software](<https://devfeed.tech/tags/open-source-software.md>), [openssf](<https://devfeed.tech/tags/openssf.md>), [repository](<https://devfeed.tech/tags/repository.md>), [repository-key-management](<https://devfeed.tech/tags/repository-key-management.md>), [security](<https://devfeed.tech/tags/security.md>), [source](<https://devfeed.tech/tags/source.md>), [supply-chain](<https://devfeed.tech/tags/supply-chain.md>), [supply-chain-security](<https://devfeed.tech/tags/supply-chain-security.md>)

### AI overview

OpenSSF's summer mentorship showcase highlights projects that strengthen open source software supply-chain security. One project adds role-specific signing keys to RSTUF repositories to isolate the impact of a compromised project key, while another builds a visualizer for RSTUF metadata and its cryptographic details.

### Source excerpt

At OpenSSF, securing the open source software supply chain isn't just about writing code or establishing policies. It is about growing the community of developers who build, maintain, and innovate these tools.

## Ubuntu - Key is stored in legacy trusted.gpg keyring...

DevFeed: [Ubuntu - Key is stored in legacy trusted.gpg keyring...](<https://devfeed.tech/articles/ubuntu-key-is-stored-in-legacy-trusted-gpg-keyring-27679.md>)

Original publisher: [Read original article](<https://gagor.pro/2022/10/ubuntu-key-is-stored-in-legacy-trusted.gpg-keyring.../>)

Author: Tom

Published: 2022-10-21T00:00:00Z

Content type: tutorial

Language: en

Sources: [Tomasz Gągor](<https://devfeed.tech/sources/tomasz-gagor.md>)

Topics: [Ubuntu](<https://devfeed.tech/topics/ubuntu.md>), [legacy systems](<https://devfeed.tech/topics/legacy-systems.md>), [Repository](<https://devfeed.tech/topics/repository.md>), [ASCII](<https://devfeed.tech/topics/ascii.md>)

Tags: [apt-key-deprecation](<https://devfeed.tech/tags/apt-key-deprecation.md>), [ascii](<https://devfeed.tech/tags/ascii.md>), [debian](<https://devfeed.tech/tags/debian.md>), [how-to](<https://devfeed.tech/tags/how-to.md>), [legacy](<https://devfeed.tech/tags/legacy.md>), [legacy-trusted-gpg-keyring](<https://devfeed.tech/tags/legacy-trusted-gpg-keyring.md>), [linux](<https://devfeed.tech/tags/linux.md>), [managing-gpg-keys-ubuntu](<https://devfeed.tech/tags/managing-gpg-keys-ubuntu.md>), [repositories](<https://devfeed.tech/tags/repositories.md>), [repository-key-management](<https://devfeed.tech/tags/repository-key-management.md>), [ubuntu](<https://devfeed.tech/tags/ubuntu.md>), [ubuntu-22-04-warnings](<https://devfeed.tech/tags/ubuntu-22-04-warnings.md>), [ubuntu-gpg-keyring](<https://devfeed.tech/tags/ubuntu-gpg-keyring.md>), [verify](<https://devfeed.tech/tags/verify.md>)

### AI overview

A tutorial explains why Ubuntu 22.04 warns that a key is stored in the legacy trusted.gpg keyring and describes how to manage repository GPG keys separately.

### Source excerpt

Learn how to resolve the "Key is stored in legacy trusted.gpg keyring" warning on Ubuntu 22.04 by properly managing GPG keys for repositories.