Eclipse installation is not trustworthy

Summary

Installing New Software displays a dialog showing multiple untrustworthy PGPs.

Steps to reproduce

Unzip Eclipse 2.30M1 on Windows 11. Edit Eclipse.ini to use a jdk-17.0.8. Start Eclipse.

Help->Install New Software... Remove all pre-configured sites., Work with https://download.eclipse.org/releases/2023-12/202310271000/ Install OCL Examples and Editors

What is the current bug behavior?

Trust Dialog shows three untrustworthy PGPs for seven bundles incling com.google.guava 32.1.3.jre, com.google.inject 7.0.0

What is the expected correct behavior?

No dialog. While the dialog may be 'correct' to a trust-aware developer, to me as a long term Eclipse user it is not. I do not understand the problem. I am not given useful remedial guidance. I can of course just ignore the dialog and just click on trust everything, which totally subverts the whole point of the dialog. Eclipse should be delivering artefacts that are inherently trustworthy without special attention from users.

Impact

Users ignore trust warnings and are irritated by Eclipse's apparent untrustworthiness.