package-installs-apt-keyring

Debian packages should not install files under /etc/apt/trusted.gpg.d/ or install an /etc/apt/trusted.gpg file.

Trusted keyrings are under the control of the local administrator and packages should not override local administrator choices.

Packages whose names end in -apt-source or -archive-keyring are permitted to install such files.

Severity: error
Experimental: false

See also