PGP key used for POM cannot be verified

https://docs.gradle.org/6.2/userguide/dependency_verification.html

build.gradle

plugins {
  id 'de.thetaphi.forbiddenapis' version '2.7'
}

wrapper.configure {
  gradleVersion = '6.2.1'
}

Execute:

$ ./gradlew --write-verification-metadata pgp,sha256 help
...
A verification file was generated but some problems were discovered:
   - some artifacts aren't signed or the signature couldn't be retrieved.
   - some signature verification failed. Checksums were generated for those artifacts but you MUST check if there's an actual problem. Look for entries with the following comment: PGP verification failed

gradle/verification-metadata.xml will now have the following entry:

      <component group="de.thetaphi" name="forbiddenapis" version="2.7">
...
         <artifact name="forbiddenapis-2.7.pom">
            <ignored-keys>
               <ignored-key id="0186f8b24c5bc02c94a0e0e486f75e83e1ee085f" reason="PGP verification failed"/>
            </ignored-keys>
            <sha256 value="aab54d67ee6c7e23c8fc98f7477621bac2742991a3ca00c5ee0625ecf0e136fe" origin="Generated by Gradle because PGP signature verification failed!"/>
         </artifact>
      </component>

[uschindler]

FYI, The GPG keservers are sometimes returning errors (Like HTTP error 504, Gateway timeout), maybe Gradle wasn’t able to download it.

[uschindler]

Thanks. That’s helpful.