Periodically re-verify GPG keys
What does this MR do and why?
Periodically re-verify GPG keys
When verifiying signatures call integrations to revalidate a GPG key if the last validation time is more than 1 day ago.
Keep track of the verification status in a new externally_verified
column. We use this column more in a follow MR: !148472 (merged)
MR acceptance checklist
Please evaluate this MR against the MR acceptance checklist. It helps you analyze changes to reduce risks in quality, performance, reliability, security, and maintainability.
Related to #442098 (closed)
Edited by Jerry Seto