diff --git a/keysmap.list b/keysmap.list
new file mode 100644
index 000000000..f458ed74e
--- /dev/null
+++ b/keysmap.list
@@ -0,0 +1,82 @@
+io.swagger.core.v3:swagger-annotations:jar:2.1.7 			        = noSig
+com.fasterxml.jackson.datatype:jackson-datatype-joda:pom:2.12.1     = badSig
+com.fasterxml.jackson.core:jackson-databind:pom:2.12.1 			    = badSig
+com.fasterxml.jackson.core:jackson-annotations:pom:2.12.1 		    = badSig
+com.fasterxml.jackson.core:jackson-core:pom:2.12.1 			        = badSig
+com.fasterxml.jackson.dataformat:jackson-dataformat-xml:pom:2.12.1  = badSig
+com.fasterxml.jackson.datatype:jackson-datatype-joda:pom:2.13.4     = badSig
+com.fasterxml.jackson.core:jackson-databind:pom:2.13.4 			    = badSig
+com.fasterxml.jackson.core:jackson-annotations:pom:2.13.4		    = badSig
+com.fasterxml.jackson.core:jackson-core:pom:2.13.4 			        = badSig
+com.fasterxml.jackson.dataformat:jackson-dataformat-xml:pom:2.13.4  = badSig
+com.fasterxml.jackson.datatype:jackson-datatype-joda:pom:2.13.4.2     = badSig
+com.fasterxml.jackson.core:jackson-databind:pom:2.13.4.2 			    = badSig
+com.fasterxml.jackson.core:jackson-annotations:pom:2.13.4.2		    = badSig
+com.fasterxml.jackson.core:jackson-core:pom:2.13.4.2 			        = badSig
+com.fasterxml.jackson.dataformat:jackson-dataformat-xml:pom:2.13.4.2  = badSig
+com.fasterxml.jackson.datatype:jackson-datatype-joda:pom:2.13.5     = badSig
+com.fasterxml.jackson.core:jackson-databind:pom:2.13.5 			    = badSig
+com.fasterxml.jackson.core:jackson-annotations:pom:2.13.5		    = badSig
+com.fasterxml.jackson.core:jackson-core:pom:2.13.5 			        = badSig
+com.fasterxml.jackson.dataformat:jackson-dataformat-xml:pom:2.13.5  = badSig
+com.fasterxml.jackson.datatype:jackson-datatype-joda:pom:2.14.2     = badSig
+com.fasterxml.jackson.core:jackson-databind:pom:2.14.2 			    = badSig
+com.fasterxml.jackson.core:jackson-annotations:pom:2.14.2		    = badSig
+com.fasterxml.jackson.core:jackson-core:pom:2.14.2 			        = badSig
+com.fasterxml.jackson.dataformat:jackson-dataformat-xml:pom:2.14.2  = badSig
+com.fasterxml.jackson.datatype:jackson-datatype-joda:pom:2.15.2     = badSig
+com.fasterxml.jackson.core:jackson-databind:pom:2.15.2 			    = badSig
+com.fasterxml.jackson.core:jackson-annotations:pom:2.15.2		    = badSig
+com.fasterxml.jackson.core:jackson-core:pom:2.15.2 			        = badSig
+com.fasterxml.jackson.dataformat:jackson-dataformat-xml:pom:2.15.2  = badSig
+
+org.broadinstitute:wdl-draft3_2.13:pom:84 = badSig
+org.broadinstitute:wdl-biscayne_2.13:pom:84 = badSig
+org.jboss.logging:jboss-logging:pom:3.4.3.Final = badSig
+org.broadinstitute:cromwell-common_2.13:jar:84 = badSig
+org.broadinstitute:cromwell-wdl-transforms-draft3_2.13:pom:84 = badSig
+org.broadinstitute:cromwell-core_2.13:pom:84 = badSig
+org.broadinstitute:wdl-draft2_2.13:jar:84 = badSig
+org.broadinstitute:cromwell-wdl-model-core_2.13:jar:84 = badSig
+org.broadinstitute:cromwell-core_2.13:jar:84 = badSig
+org.broadinstitute:cromwell-wom_2.13:jar:84 = badSig
+org.broadinstitute:cromwell-wdl-transforms-draft2_2.13:pom:84 = badSig
+org.broadinstitute:cromwell-wdl-model-draft3_2.13:jar:84 = badSig
+org.broadinstitute:cromwell-wdl-transforms-biscayne_2.13:pom:84 = badSig
+org.broadinstitute:wdl-draft3_2.13:jar:84 = badSig
+org.broadinstitute:wdl-biscayne_2.13:jar:84 = badSig
+org.broadinstitute:cromwell-wdl-model-biscayne_2.13:jar:84 = badSig
+org.broadinstitute:cromwell-common_2.13:pom:84 = badSig
+org.broadinstitute:cromwell-wdl-transforms-new-base_2.13:jar:84 = badSig
+org.broadinstitute:cromwell-wdl-model-draft2_2.13:jar:84 = badSig
+com.readytalk:metrics3-statsd:pom:4.2.0 = badSig
+org.broadinstitute:cromwell-wdl-transforms-shared_2.13:pom:84 = badSig
+org.broadinstitute:cromwell-wdl-model-draft2_2.13:pom:84 = badSig
+org.broadinstitute:cromwell-wdl-transforms-shared_2.13:jar:84 = badSig
+org.broadinstitute:cromwell-wdl-model-biscayne_2.13:pom:84 = badSig
+org.broadinstitute:cromwell-wdl-transforms-new-base_2.13:pom:84 = badSig
+org.broadinstitute:cromwell-wdl-model-core_2.13:pom:84 = badSig
+org.broadinstitute:language-factory-core_2.13:jar:84 = badSig
+org.broadinstitute:cromwell-wom_2.13:pom:84 = badSig
+org.broadinstitute:cromwell-wdl-model-draft3_2.13:pom:84 = badSig
+org.broadinstitute:language-factory-core_2.13:pom:84 = badSig
+org.broadinstitute:cromwell-wdl-transforms-draft3_2.13:jar:84 = badSig
+org.broadinstitute:wdl-draft2_2.13:pom:84 = badSig
+org.broadinstitute:cromwell-wdl-transforms-biscayne_2.13:jar:84 = badSig
+com.readytalk:metrics3-statsd:jar:4.2.0 = badSig
+org.jboss.logging:jboss-logging:jar:3.4.3.Final = badSig
+org.broadinstitute:cromwell-wdl-transforms-draft2_2.13:jar:84 = badSig
+
+
+
+org.kohsuke:github-api:pom:1.313                                    = badSig
+org.kohsuke:github-api:pom:1.123                                    = badSig
+com.spotify:docker-client:pom:8.16.0                                = badSig
+org.eclipse.jetty.toolchain:jetty-servlet-api:pom:4.0.6                              = badSig
+org.eclipse.jetty.toolchain:jetty-jakarta-servlet-api:pom:5.0.2     = badSig
+org.javamoney:moneta:pom:1.4.2                                      = badSig
+org.javamoney.moneta:moneta-core:pom:1.4.2                          = badSig
+javax.money:money-api:pom:1.1                                       = badSig
+
+* 									                                = noSig
+*									                                = any