Bug 444852

Summary: Dicover fails to update packages with a message of bad GPG signature for git-lfs
Product: [Applications] Discover Reporter: per.jonsson
Component: discoverAssignee: Dan Leinir Turthra Jensen <leinir>
Status: RESOLVED DOWNSTREAM    
Severity: normal CC: aleixpol, dennis.schridde, nate
Priority: NOR    
Version First Reported In: 5.22.5   
Target Milestone: ---   
Platform: Other   
OS: Linux   
See Also: https://bugs.kde.org/show_bug.cgi?id=448646
Latest Commit: Version Fixed/Implemented In:
Sentry Crash Report:

Description per.jonsson 2021-11-02 18:50:18 UTC 
SUMMARY
Discover fails to update packages with the message under OBSERVED RESULT below. I have updated git-lfs to v3.0.2 from the command line, but Discover still fails to update the rest of the 43 package updates it lists, with the same message. Can I deselect git-lfs from being updated/considered by discover? I tried to untick the boxes for git-lfs under "settings" but get the message: "Failed to obtain authentication".
How can I proceed and have Discover complete the rest of the updates?

STEPS TO REPRODUCE
1. Click on the Updates icon, on the right of the taskbar in Fedora 34
2. Click check for updates, in Discover
3. Click "Update all"

OBSERVED RESULT

"Bad GPG signature found

/var/cache/PackageKit/34/metadata/github_git-lfs-34-x86_64/packages/git-lfs-3.0.2-1.el8.x86_64.rpm could not be verified.
/var/cache/PackageKit/34/metadata/github_git-lfs-34-x86_64/packages/git-lfs-3.0.2-1.el8.x86_64.rpm: digest: SIGNATURE: NOT OK

Please report this issue to the packagers of your distribution."

EXPECTED RESULT

Successful update of all 44 package updates.

SOFTWARE/OS VERSIONS
Linux/KDE Plasma:  Fedora 34
(available in About System)
KDE Plasma Version: 5.22.5
KDE Frameworks Version: 5.85.0
Qt Version: 5.15.2

ADDITIONAL INFORMATION
Comment 1 Nate Graham 2021-11-08 18:46:51 UTC 
Like it says: "Please report this issue to the packagers of your distribution" :)
Comment 2 Dennis Schridde 2022-01-14 14:12:52 UTC 
I encounter the same issue with virtio-win from a separate repository on Fedora 35. Updating using `dnf update` works fine, only Discover reports an error.

/etc/yum.repos.d/virtio-win.repo is from https://fedorapeople.org/groups/virt/virtio-win/virtio-win.repo

Documentation: https://github.com/virtio-win/virtio-win-pkg-scripts/

Operating System: Fedora Linux 35
KDE Plasma Version: 5.23.4
KDE Frameworks Version: 5.89.0
Qt Version: 5.15.2
Kernel Version: 5.15.13-200.fc35.x86_64 (64-bit)
Graphics Platform: Wayland
Processors: 12 × Intel® Core™ i7-8750H CPU @ 2.20GHz
Memory: 62,5 GiB of RAM
Graphics Processor: Mesa Intel® UHD Graphics 630