FWIW, a properly executed full compromise of the supply chain would also alter the information on getting a proper GPG key to compare against. PGP doesn't protect you against first instance ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results