I always follow this when these issues pop up:
[FAQ] Issues with “signature is marginal trust”, “signature is unknown trust”, or “invalid or corrupted package” - General system / Newbie - EndeavourOS