anchor.diff:  # https://github.com/golang/go/issues/14739#issuecomment-324767697
   	GNUPGHOME="$(mktemp -d)"; export GNUPGHOME; \
   # https://www.google.com/linuxrepositories/
  -	gpg --batch --keyserver keyserver.ubuntu.com --recv-keys 'EB4C 1BFD 4F04 2F6D DDCC EC91 7721 F63B D38B 4796'; \
  +	gpg --batch --keyserver keyserver.ubuntu.com --recv-keys 'EB4C 1BFD 4F04 2F6D DDCC  EC91 7721 F63B D38B 4796'; \
  +# let's also fetch the specific subkey of that key explicitly that we expect "go.tgz.asc" to be signed by, just to make sure we definitely have it
  +	gpg --batch --keyserver keyserver.ubuntu.com --recv-keys '2F52 8D36 D67B 69ED F998  D857 78BD 6547 3CB3 BD13'; \
   	gpg --batch --verify go.tgz.asc go.tgz; \
   	gpgconf --kill all; \
   	rm -rf "$GNUPGHOME" go.tgz.asc; \
  
positive.code: 
  ENV PATH /usr/local/go/bin:$PATH
  
  ENV GOLANG_VERSION 1.17
  
  RUN set -eux; \
  	apk add --no-cache --virtual .fetch-deps gnupg; \
  
negative.code: FROM node:14-alpine3.15
  
  RUN apk add --no-cache ca-certificates
  
  