PGP commits are not verified due to no trust chain.

[samkelleher]

While it's possible to see that commits are PGP signed, the pgp command running in the container does not by default go and fetch public keys

It needs a gpg.conf like below:

no-greeting
auto-key-retrieve
no-emit-version
auto-key-locate hkps://hkps.pool.sks-keyservers.net

However, even if it did fetch the keys, due to the trust required, the signature still is not verified. You have to trust keys specifically via interaction.

This means the tool should be configurable to fetch and trust certain keys (on startup). Project maintainers would need to manage a manifest of trusted keys and keep them up to date.