doc: advise users to import the full set of trusted release keys

PR-URL: https://github.com/nodejs/node/pull/32655
Fixes: https://github.com/nodejs/node/issues/32559
Reviewed-By: James M Snell <jasnell@gmail.com>
Reviewed-By: Rich Trott <rtrott@gmail.com>
Reviewed-By: Myles Borins <myles.borins@gmail.com>
This commit is contained in:
Reşat SABIQ 2020-04-04 15:31:39 +06:00 committed by Antoine du Hamel
parent 6c3326c42d
commit 888900b016

View File

@ -602,7 +602,8 @@ Primary GPG keys for Node.js Releasers (some Releasers sign with subkeys):
* **Shelley Vohr** &lt;shelley.vohr@gmail.com&gt;
`B9E2F5981AA6E0CD28160D9FF13993A75599653C`
To import the full set of trusted release keys:
To import the full set of trusted release keys (including subkeys possibly used
to sign releases):
```bash
gpg --keyserver pool.sks-keyservers.net --recv-keys 4ED778F539E3634C779C87C6D7062848A1AB005C