summaryrefslogtreecommitdiffstats
path: root/sources
diff options
context:
space:
mode:
authorTodd Zullinger <tmz@pobox.com>2018-08-10 23:58:45 -0400
committerTodd Zullinger <tmz@pobox.com>2018-08-11 00:06:06 -0400
commitf081e18bccdfe23ea6b903e9c4e56d2dc9d2f294 (patch)
tree957a9b536d87c9c9a9426054c3cbbaa9ac94653c /sources
parentba224e3693bdf458869ce8093dfe66239e147bb9 (diff)
downloadcgit_EL6-f081e18bccdfe23ea6b903e9c4e56d2dc9d2f294.tar.gz
verify upstream GPG signatures in %prep
Automate verification for both cgit and git tarballs. This is one less manual step for maintainers when updating a package. The GPG key for git should generally be copied from the git package: https://src.fedoraproject.org/rpms/git/raw/master/f/gpgkey-junio.asc
Diffstat (limited to 'sources')
-rw-r--r--sources2
1 files changed, 2 insertions, 0 deletions
diff --git a/sources b/sources
index 8ef85c3..fa17256 100644
--- a/sources
+++ b/sources
@@ -1,2 +1,4 @@
SHA512 (cgit-1.2.1.tar.xz) = c7380df9afbc3735ef9e4f196f4f5bbd26cf52e473fa6f435e7d0c00dc295cc8de6bee6bfb1857144025c8591d41a6a74efb1af551e8610848d90ac40fcfab36
+SHA512 (cgit-1.2.1.tar.asc) = fc72057bda330d0ad12f96054e531a254c3dc6d80067dc0d8982bd4126e0069ea2dfd8d35185416501d5bc57eec8a659df3c5d8f3c47d38d987fac473dcace44
SHA512 (git-2.18.0.tar.xz) = db19363c9c2042248322d49874a27c0614acfb912183725e5d4f0331d6b44cef66a9a7da6a49bd4a17e5d86d30c5fed6bef7527f386494184595a433c4060e46
+SHA512 (git-2.18.0.tar.sign) = 24826b20ce8e4e1afdb8d84b39f5914d5e29d289be31dfe9083968831294619221787e080c3a395bc105293a1184410527ac3694c465babd447791b0d019cc9b