Unverified50% confidenceFactExact time
GPG signature verification is an important part of open-source supply chain security; users can confirm the authenticity of the source via git verify-commit or the Verified badge in the GitHub interface.
1
Sources
50%
Confidence
Long-term
Relevance
10/28/2026
First Seen
Sources
Related Entities
Related Claims
VerifiedGPG is an encryption tool based on the OpenPGP standard; developers sign release artifacts with a private key, and users verify them with a public key to confirm the content has not been tampered with.77% similarUnverifiedGit tag signing is typically implemented based on GPG or SSH key systems.74% similarUnverifiedThe official commit for v3.32.0 was submitted by the openai-sdks team and has been verified via GPG signature.65% similarUnverifiedThe GPG key ID B5690EEEBB952194 is a short identifier for the signer's public key, which can be used to retrieve the full public key on a key server and verify the signer's identity.63% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1109316API
curl https://kongchang.com/api/v1/knowledge/claims/1109316MCP
get_claim(id=1109316)