This plugin allows you to automatically verify PGP signatures of all project dependencies.
You can find more information on the site:
https://www.simplify4u.org/pgpverify-maven-plugin/