From 08f1e524df7f5e43da16726dea2ce6ab0230ace4 Mon Sep 17 00:00:00 2001
From: "antoine.vinot" <antoine.vinot@sonarsource.com>
Date: Wed, 29 Apr 2026 10:32:46 +0200
Subject: [PATCH] Set skipSignatureVerification default value to false

---
 action.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/action.yml b/action.yml
index 0693239..f636ea2 100644
--- a/action.yml
+++ b/action.yml
@@ -25,9 +25,9 @@ inputs:
     required: false
     default: https://binaries.sonarsource.com/Distribution/sonar-scanner-cli
   skipSignatureVerification:
-    description: Skip GPG signature verification (defaults to true temporarily while dirmngr dependency is resolved; set to false to enable verification)
+    description: Skip GPG signature verification (not recommended for security)
     required: false
-    default: "true"
+    default: "false"
 runs:
   using: node24
   main: dist/index.js