Enable secure GPG signature verification for Spack buildcache installations#117

Draft

Copilot wants to merge 10 commits intothree-track-buildfrom

copilot/sub-pr-115

Commits on Dec 30, 2025

Initial plan
Copilot
committed
Enable GPG signature verification for buildcache installations

Copilot
and
wdconinc
committed
docs: add buildcache signing documentation and improve comments

Copilot
and
wdconinc
committed
fix: add GPG setup to builder_installation_custom and runtime_custom

Copilot
and
wdconinc
committed
refactor: improve GPG key import and add clarifying comments

Copilot
and
wdconinc
committed
refactor: move GPG key setup to base layer and add transition strategy

Copilot
and
wdconinc
committed
refactor: improve transition strategy error detection

Copilot
and
wdconinc
committed
refactor: add error handling and improve documentation

Copilot
and
wdconinc
committed
docs: add comprehensive security evaluation and warnings

Copilot
and
wdconinc
committed
security: require secret key and never store in container layers

Copilot
and
wdconinc
committed