[Dev] peculiar entries in the repo-lint report

[bill-auger]

oaken-source -

could you explain the entries in the sections "repo.db entries
with mismatched signing keys:" and "packages with invalid
signatures:" - it looks like a bug with the lint script - the
keyring package is on those lists - that is signed by the
autobuilder - that signature is surely valid

the entries referring to 'C3F4FFCF3EAE8697' are correct; but
the ones with 'GPG-EXIT 33554433' look fishy

libre/armv7h/parabola-keyring:
  GPG-EXIT 33554433 != A170D6A0B669E21A
libre/armv7h/parabola-keyring-20190719-1-any.pkg.tar.xz:
  no public key: gpg-exit 33554433

https://lists.parabola.nu/pipermail/maintenance/2019-August/010323.html

BTW - where is the code for the linter? - i have some checks i
could add to it