Insecure Installation Defaults

chef is vulnerable to insecure installation defaults. The library by default installs packages without checking the package's gpg signature. This can allow a malicious user to easily install a malicious package on to the system...