diff --git a/roles/debian/tasks/google-chrome.yml b/roles/debian/tasks/google-chrome.yml
index 63e0c01..fca4966 100644
--- a/roles/debian/tasks/google-chrome.yml
+++ b/roles/debian/tasks/google-chrome.yml
@@ -15,9 +15,10 @@
 
 - name: Install Google signing key
   become: true
-  ansible.builtin.apt_key:
-    id: EB4C1BFD4F042F6DDDCCEC917721F63BD38B4796
+  ansible.builtin.get_url:
     url: https://dl.google.com/linux/linux_signing_key.pub
+    dest: /etc/apt/trusted.gpg.d/google.gpg
+    checksum: fb8df9740df6a1125fd2983465d830b764b63cd92d5ada8b5bbf75927d6a71ee
 - name: Install Google repository
   become: true
   ansible.builtin.lineinfile:
diff --git a/roles/debian/tasks/vscode.yml b/roles/debian/tasks/vscode.yml
index 63cca23..a122c7c 100644
--- a/roles/debian/tasks/vscode.yml
+++ b/roles/debian/tasks/vscode.yml
@@ -15,9 +15,10 @@
 
 - name: Install Microsoft signing key
   become: true
-  ansible.builtin.apt_key:
-    id: BC528686B50D79E339D3721CEB3E94ADBE1229CF
+  ansible.builtin.get_url:
     url: https://packages.microsoft.com/keys/microsoft.asc
+    dest: /etc/apt/trusted.gpg.d/microsoft.gpg
+    checksum: 2cfd20a306b2fa5e25522d78f2ef50a1f429d35fd30bd983e2ebffc2b80944fa
 - name: Install vscode repository
   become: true
   ansible.builtin.lineinfile:
diff --git a/roles/debian/tasks/vscodium.yml b/roles/debian/tasks/vscodium.yml
index 6e5db63..7e73f75 100644
--- a/roles/debian/tasks/vscodium.yml
+++ b/roles/debian/tasks/vscodium.yml
@@ -15,9 +15,10 @@
 
 - name: Install paulcarroty signing key
   become: true
-  ansible.builtin.apt_key:
-    id: 1302DE60231889FE1EBACADC54678CF75A278D9C
+  ansible.builtin.get_url:
     url: https://gitlab.com/paulcarroty/vscodium-deb-rpm-repo/raw/master/pub.gpg
+    dest: /etc/apt/trusted.gpg.d/paulcarroty.gpg
+    checksum: dbdfd9af3b83b72a24c89160ce7638418142e2cf4736ab53e5061e10070f13c1
 - name: Install VSCodium repository
   become: true
   ansible.builtin.lineinfile: