From c7ee0f9df90b7aa20e8dcf9695dcfe2e7da5b4f2 Mon Sep 17 00:00:00 2001
From: Antoine Vinot <antoine.vinot@sonarsource.com>
Date: Wed, 29 Apr 2026 10:13:05 +0200
Subject: [PATCH] SQSCANGHA-140 Set skipSignatureVerification default value to
 true to avoid breaking change (#240)

Co-authored-by: Gustavo Cunha <dev@gustavocunha.dev>
---
 action.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/action.yml b/action.yml
index f636ea2..0693239 100644
--- a/action.yml
+++ b/action.yml
@@ -25,9 +25,9 @@ inputs:
     required: false
     default: https://binaries.sonarsource.com/Distribution/sonar-scanner-cli
   skipSignatureVerification:
-    description: Skip GPG signature verification (not recommended for security)
+    description: Skip GPG signature verification (defaults to true temporarily while dirmngr dependency is resolved; set to false to enable verification)
     required: false
-    default: "false"
+    default: "true"
 runs:
   using: node24
   main: dist/index.js