Can I pick GPG key shows in github.com/<username>.gpg?

[Nambers]

Select Topic Area

Question

Body

Due to revoking expired gpg key from GitHub will tag every old commits to unverified (isaacs/github#1099), I'd like to keep those expired (but not leaked) gpg key into my account.
Therefore I had multiple GPG keys in records and I prefer to show my newest one (since right now it shows the oldest expired one).
Is there a way to choose it?

PS: it's not in time order but in key ID order. My old one is beginning with '0'....

[PhilipPanda]

No. GitHub does not let you choose which GPG key is shown.

[Nambers]

That's sad... Anyway get around this? Or how to create a feature request etc?

[PhilipPanda]

That's sad... Anyway get around this? Or how to create a feature request etc?

Unfortunately not :-(

[shinybrightstar]

Hi @Nambers, thanks for the detailed question! 👋

Currently, there isn't a built-in way to choose which GPG key is displayed at your github.com/.gpg endpoint or to control the ordering. We understand why you'd want to keep expired (but not compromised) keys on your account to preserve commit verification history while showing only your current key publicly.

If you haven't already, you may want to check the GPG key management documentation for any additional options.

Let us know if you have any other questions!

[GR0UD]

Short answer: No built-in way to choose or reorder which key is served at
https://github.com/<username>.gpg

GitHub sorts by key ID ascending (not creation date or validity). So an old expired key starting with 0 will always appear first.
Workarounds people use:

Delete the old key completely (if you don’t need it).
Create a new key with a higher key ID (delete & recreate until the newest one wins — hacky but works).
Just document “use the key with fingerprint XXXX” in your README.

GitHub staff have seen this request many times, maybe add a +1 here so it gets prioritized?