Verify PGP signature of AppImage

2 files changed, 7 insertions, 0 deletions

diff --git a/.SRCINFO b/.SRCINFO
index 0f86d9c049f9..28cabc03bf57 100644
--- a/.SRCINFO
+++ b/.SRCINFO
@@ -10,11 +10,14 @@ pkgbase = cryptomator-bin
 	replaces = cryptomator
 	options = !strip
 	source = cryptomator-1.5.15-2-x86_64.AppImage::https://github.com/cryptomator/cryptomator/releases/download/1.5.15/cryptomator-1.5.15-x86_64.AppImage
+	source = cryptomator-1.5.15-2-x86_64.AppImage.asc::https://github.com/cryptomator/cryptomator/releases/download/1.5.15/cryptomator-1.5.15-x86_64.AppImage.asc
 	source = org.cryptomator.Cryptomator.desktop
 	source = org.cryptomator.Cryptomator.png
 	source = org.cryptomator.Cryptomator.svg
 	source = cryptomator-vault.xml
+	validpgpkeys = 58117AFA1F85B3EEC154677D615D449FE6E6A235
 	sha256sums = cdaa5221fc166fed76fe4a894939d335559e8840d8c354e3e1c8fd2135dfccd5
+	sha256sums = SKIP
 	sha256sums = 53c509fe54ef1c5c28b469d86291536649367fb2030b2c0fb3101da2031f8e6e
 	sha256sums = d299636d78d093117fa7a26563f22e01cdb75b1fcc6cc279bc88627574c968bd
 	sha256sums = 0989ecc24ecd672c5c525ab6f1f0fb18a9eeca86ebec19738f512801c152f756
diff --git a/PKGBUILD b/PKGBUILD
index 9aa567ece2f9..84cd72d7f06f 100644
--- a/PKGBUILD
+++ b/PKGBUILD
@@ -13,17 +13,21 @@ depends=('fuse2')
 conflicts=('cryptomator')
 replaces=('cryptomator')
 source=("cryptomator-${pkgver}-${pkgrel}-x86_64.AppImage::https://github.com/cryptomator/cryptomator/releases/download/${pkgver}/cryptomator-${pkgver}-x86_64.AppImage"
+        "cryptomator-${pkgver}-${pkgrel}-x86_64.AppImage.asc::https://github.com/cryptomator/cryptomator/releases/download/${pkgver}/cryptomator-${pkgver}-x86_64.AppImage.asc"
         'org.cryptomator.Cryptomator.desktop'
         'org.cryptomator.Cryptomator.png'
         'org.cryptomator.Cryptomator.svg'
         'cryptomator-vault.xml')
 sha256sums=('cdaa5221fc166fed76fe4a894939d335559e8840d8c354e3e1c8fd2135dfccd5'
+            'SKIP'
             '53c509fe54ef1c5c28b469d86291536649367fb2030b2c0fb3101da2031f8e6e'
             'd299636d78d093117fa7a26563f22e01cdb75b1fcc6cc279bc88627574c968bd'
             '0989ecc24ecd672c5c525ab6f1f0fb18a9eeca86ebec19738f512801c152f756'
             '78537ead26dcc1488d7fff02f47fce559f70f9bb2d7fa7fa1741ad3cd151bfad')
 options=('!strip')
 
+validpgpkeys=('58117AFA1F85B3EEC154677D615D449FE6E6A235')
+
 package() {
   install -Dm755 "${srcdir}/cryptomator-${pkgver}-${pkgrel}-x86_64.AppImage" "${pkgdir}/opt/${pkgname}/cryptomator-${pkgver}-x86_64.AppImage"
   install -Dm644 "${srcdir}/cryptomator-vault.xml" "${pkgdir}/usr/share/mime/packages/cryptomator-vault.xml"