OpenTofu registry is missing GPG keys for this provider

[pascal-hofmann]

I noticed the public GPG key of this provider is missing in the OpenTofu module registry.

Note: For security reasons, it has to be submitted by the provider author for the OpenTofu registry to accept it.

You can follow this link to submit it: Submit new Provider Signing Key

If you don't have access to the public key anymore, it can be extracted from the terraform registry:

curl 'https://registry.terraform.io/v1/providers/newrelic/newrelic/3.38.0/download/linux/amd64' | jq --raw-output '.signing_keys | .gpg_public_keys | .[0] | .ascii_armor'

I attached the key for reference: newrelic_registry_key.pub.txt

Background

• OpenTofu is a fork of Terraform that is open-source, community-driven, and managed by the Linux Foundation.
• Hashicorp silently changed the Terms of Service for the terraform provider registry to disallow usage with things other than terraform, so OpenTofu had to build its own registry.

Terraform OpenTofu Version

$ tofu --version
OpenTofu v1.7.1
on darwin_amd64

Expected Behavior

Provider is downloaded and verified.

Actual Behavior

Signature validation was skipped:

- Installed newrelic/newrelic v3.38.0. Signature validation was skipped due to the registry not containing GPG keys for this provider

Steps to Reproduce

• Install OpenTofu
• Run tofu init in any project using this provider.

[pranav-new-relic]

Thanks for bringing this to our notice, @pascal-hofmann. I've just created https://github.com/opentofu/registry/issues/646 / https://github.com/opentofu/registry/issues/647 with OpenTofu's Registry.

[pranav-new-relic]

PR https://github.com/opentofu/registry/pull/647 merged, so this should be good to go now. Thank you so much for bringing this to our notice, @pascal-hofmann.