inspectors/apt: fix release signature validation

Merged PR #100 via commit 2d202b5, fixing APT InRelease signature validation to verify the release against the archive's public keys.

Resolution: closed resolved

Reason: PR #100 was merged with commit 2d202b5. The change corrected release signature validation in the APT inspectors.

Evaluated by: mr-cal-bot

No scores available.

- [x] Have you signed the [CLA](http://www.ubuntu.com/legal/contributors/)? -----

Date	Model	Scores	Action	Summary
2026-10-03 02:43 PM UTC	stealth/space-bunny-alpha	—	closed resolved	Merged PR #100 via commit 2d202b5, fixing APT InRelease signature validation to verify the release against the archive's public keys.
2026-09-25 10:10 AM UTC	stealth/space-bunny-alpha	—	closed resolved	Merged PR #100 via commit 2d202b5, fixing release signature validation in the APT inspectors.
2026-09-10 02:48 AM UTC	qwen/qwen3.6-35b-a3b	—	—	Merged by maintainer cmatsuoka to fix release signature validation in the apt inspectors. The change was accepted and closed without review comments or CI checks, successfully resolving the validation issue.

Date	Change
2025-02-22 12:08 PM UTC	created

Issue	Project	State	Summary	Similarity
#102 inspectors/apt: fix release validation of translation file	fetch-service	merged	Merged PR #102 in commit 083028d, fixing APT translation validation to compare the downloaded file's SHA-256 digest and size with its Release entry.	81%
#75 inspectors/apt: add test for packages verification in release	fetch-service	merged	Merged PR #75 added APT release package-verification test coverage, landing as commit b9d7ce0.	76%
#65 inspectors: add quick check for clearsigned file	fetch-service	merged	Merged as commit 06bff29, adding a quick clearsigned-file check to the APT release inspector.	72%
#61 inspectors: add apt and deb file inspectors	fetch-service	merged	Merged PR #61 in commit 566f57c, adding stateful APT and DEB inspectors to validate signed InRelease files, Packages.xz indexes, and .deb packages.	72%