From 3bb6c721647523dd16e1b7c6fa767cc2e79e2ece Mon Sep 17 00:00:00 2001 From: Nikhil Mittal Date: Mon, 18 May 2026 09:37:00 +0530 Subject: [PATCH] Fix production-heartbeat GPG key verification on Ubuntu The GitHub Actions runner image (ubuntu24/20260513.135) no longer has the Microsoft GPG key in the global apt trust store. Use the modern signed-by directive so apt can verify the VS Code repo without relying on globally trusted keys. --- .github/workflows/production-heartbeat.yml | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) diff --git a/.github/workflows/production-heartbeat.yml b/.github/workflows/production-heartbeat.yml index 7fdd8907..2d31cb7c 100644 --- a/.github/workflows/production-heartbeat.yml +++ b/.github/workflows/production-heartbeat.yml @@ -25,9 +25,8 @@ jobs: run: | sudo apt update sudo apt install wget gpg -y - wget -qO- https://packages.microsoft.com/keys/microsoft.asc | gpg --dearmor > packages.microsoft.gpg - sudo install -o root -g root -m 644 packages.microsoft.gpg /usr/share/keyrings/ - sudo sh -c 'echo "deb [arch=amd64] https://packages.microsoft.com/repos/vscode stable main" > /etc/apt/sources.list.d/vscode.list' + wget -qO- https://packages.microsoft.com/keys/microsoft.asc | gpg --dearmor | sudo tee /etc/apt/keyrings/packages.microsoft.gpg > /dev/null + echo "deb [arch=amd64 signed-by=/etc/apt/keyrings/packages.microsoft.gpg] https://packages.microsoft.com/repos/vscode stable main" | sudo tee /etc/apt/sources.list.d/vscode.list sudo apt update sudo apt install code -y