net-misc/telescope: verify-sig

Signed-off-by: Anna (cybertailor) Vyalkova <cyber+gentoo@sysrq.in>

net-misc/telescope/Manifest

@@ -1,2 +1,3 @@
 DIST telescope-0.5.2.tar.gz 270398 BLAKE2B e745eca6f259707036bed780956c57efad2320d66b40b13d644cff78a84d225d5dea58f19d2586d22b2ce43e193f37f47337ee229be09558bf16cd029515b8f4 SHA512 34e22fd2139c4e0ca04562d3f9542891a6cb743814cf8c1eae3c15e7ae65dd5bc9b609701788aa8b641ce30ce27ca602662ddad597093fa10966f0d588e85806
+DIST telescope-0.6.1.sha.sig 437 BLAKE2B 6ebfe552772f99c4ffba71db429ecbc12b3722154137965b93d250389c91a3ef00da4578b1987e0d9867ae4e0a8af64280192fa30cb1d45f01f0791d8741d6b5 SHA512 c963c43f8e17b6bb5e964f999d041e3cf6bdee14c2123b5e5041511cdef63f5e308c8b4d31c9eee32708d9a54c75cc43cb65b32b89f2f8b13918b54f216350db
 DIST telescope-0.6.1.tar.gz 277742 BLAKE2B 3a782084dbb2f56836fcb5f68158c4b767d3ca742d6d177aca00757485ee0854b56b7f561a3f2040382584087f0a5e7936e7c2daa959b5549f1fd678b4b22ba6 SHA512 aff74406c87ed59a3adec7e5d43ac99f4e8d18e761d7590197ab86b4b8fd50882bcc783f47e1da8eab2a0a632a8b78212b45b1ab314527fc7b96fb2cb16d78f0

net-misc/telescope/telescope-0.6.1.ebuild

@@ -3,15 +3,17 @@
 
 EAPI=8
 
-inherit toolchain-funcs
+VERIFY_SIG_METHOD="signify"
+inherit toolchain-funcs verify-sig
 
 DESCRIPTION="w3m-like browser for Gemini"
 HOMEPAGE="https://telescope.omarpolo.com"
-SRC_URI="https://github.com/omar-polo/${PN}/releases/download/${PV}/${P}.tar.gz"
+SRC_URI="https://github.com/omar-polo/${PN}/releases/download/${PV}/${P}.tar.gz
+	verify-sig? ( https://github.com/omar-polo/${PN}/releases/download/${PV}/SHA256.sig -> ${P}.sha.sig )"
 
 LICENSE="!libbsd? ( BSD MIT ) ISC unicode"
 SLOT="0"
-KEYWORDS="~amd64 ~arm ~arm64 ~x86"
+KEYWORDS="~amd64 ~x86"
 IUSE="+libbsd"
 
 DEPEND="
@@ -22,7 +24,23 @@ DEPEND="
 	libbsd? ( dev-libs/libbsd )
 "
 RDEPEND="${DEPEND}"
-BDEPEND="virtual/pkgconfig"
+BDEPEND="
+	virtual/pkgconfig
+	verify-sig? ( sec-keys/signify-keys-telescope:$(ver_cut 1-2) )
+"
+
+VERIFY_SIG_OPENPGP_KEY_PATH="${BROOT}/usr/share/signify-keys/${PN}-$(ver_cut 1-2).pub"
+
+src_unpack() {
+	if use verify-sig; then
+		# Too many levels of symbolic links
+		cp "${DISTDIR}"/${P}.{sha.sig,tar.gz} "${WORKDIR}" || die
+		cd "${WORKDIR}" || die
+		verify-sig_verify_signed_checksums \
+			${P}.sha.sig sha256 ${P}.tar.gz
+	fi
+	default
+}
 
 src_configure() {
 	tc-export_build_env BUILD_CC