From bc2df329f5186313d123c8c7591f0bbf5bed5908 Mon Sep 17 00:00:00 2001
From: Josh Soref <2119212+jsoref@users.noreply.github.com>
Date: Fri, 27 Dec 2024 09:30:41 -0500
Subject: [PATCH] Add `apt-key` to forbidden

---
 .github/actions/spelling/line_forbidden.patterns | 11 +++++++++++
 1 file changed, 11 insertions(+)

diff --git a/.github/actions/spelling/line_forbidden.patterns b/.github/actions/spelling/line_forbidden.patterns
index 25f40114..057b9b4a 100644
--- a/.github/actions/spelling/line_forbidden.patterns
+++ b/.github/actions/spelling/line_forbidden.patterns
@@ -149,6 +149,17 @@
 # Should be `long-standing`
 \blong standing\b
 
+# `apt-key` is deprecated
+# ... instead you should be writing a pair of files:
+# ... * the gpg key added to a distinct key ring file based on your project/distro/key...
+# ... * the sources.list in a district file -- not simply appended to `/etc/apt/sources.list` -- (there is a newer format [DEB822](https://manpages.debian.org/bookworm/dpkg-dev/deb822.5.en.html)) that references the gpg key.
+#
+# curl http://download.something.example.com/$DISTRO/Release.key | \
+#     gpg --dearmor --yes --output /usr/share/keyrings/something-distro.gpg
+# echo "deb [signed-by=/usr/share/keyrings/something-distro.gpg] http://download.something.example.com/repositories/home:/$DISTRO ./" \
+#     >> /etc/apt/sources.list.d/something-distro.list
+\bapt-key add\b
+
 # Should probably be a person named `Nick` or the abbreviation `NIC`
 \bNic\b