Merge branch 'main' into pr-tester-workflow

Author: yockgen

internal/ospackage/debutils/verify.go

@@ -129,6 +129,12 @@ func VerifyPackagegz(relPath string, pkggzPath string, arch string, component st
 func VerifyRelease(relPath string, relSignPath string, pKeyPath string) (bool, error) {
 	log := logger.Logger()
 
+	//ignore verification if trusted=yes
+	if pKeyPath == "[trusted=yes]" {
+		log.Infof("Repository marked (%s) as [trusted=yes], skipping Release file signature verification", relPath)
+		return true, nil
+	}
+
 	// Read the public key
 	keyringBytes, err := os.ReadFile(pKeyPath)
 	if err != nil {