From e82bcb9c8a7ffd0b3387de242c552c84839eaa17 Mon Sep 17 00:00:00 2001
From: Robin Krahl <robin.krahl@ireas.org>
Date: Fri, 27 Dec 2019 23:05:19 +0100
Subject: Add verify task to lint build

This patch adds a verify task to the lint build that checks the OpenPGP
signature of the last commit.
---
 .builds/lint.yml | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/.builds/lint.yml b/.builds/lint.yml
index 026f5da..678cde8 100644
--- a/.builds/lint.yml
+++ b/.builds/lint.yml
@@ -2,10 +2,15 @@
 # SPDX-License-Identifier: CC0-1.0
 image: archlinux
 packages:
+  - gnupg
   - reuse
 sources:
   - https://git.ireas.org/nitrokey-rs
 tasks:
+  - verify: |
+      cd nitrokey-rs
+      curl -s "https://pgp.ireas.org/0x6D533958F070C57C.txt" | gpg --import
+      git verify-commit HEAD
   - reuse: |
       cd nitrokey-rs
       reuse lint
-- 
cgit v1.2.1