Use verify-sig for dev-python/pyotp2289/pyotp2289-1.2.1.ebuild

1 files changed, 12 insertions, 2 deletions

diff --git a/dev-python/pyotp2289/pyotp2289-1.2.1.ebuild b/dev-python/pyotp2289/pyotp2289-1.2.1.ebuild
index 5996de2..d17936a 100644
--- a/dev-python/pyotp2289/pyotp2289-1.2.1.ebuild
+++ b/dev-python/pyotp2289/pyotp2289-1.2.1.ebuild
@@ -6,22 +6,32 @@ EAPI=8
 DISTUTILS_USE_PEP517=setuptools
 PYTHON_COMPAT=( python3_{8..11} )
 
-inherit distutils-r1
+inherit distutils-r1 verify-sig
 
 DESCRIPTION="A pure Python 3 implementation of RFC-2289 - 'A One-Time Password System'"
 HOMEPAGE="https://github.com/blackm0re/pyotp2289"
 MY_PN="pyotp2289"
 MY_P="${MY_PN}-${PV}"
 
-SRC_URI="mirror://pypi/${MY_P:0:1}/${MY_PN}/${MY_P}.tar.gz"
+SRC_URI="
+        mirror://pypi/${MY_P:0:1}/${MY_PN}/${MY_P}.tar.gz
+        verify-sig? ( https://github.com/blackm0re/pyotp2289/releases/download/${PV}/${MY_P}.tar.gz.asc )
+"
+
 KEYWORDS="amd64 arm arm64 ppc ppc64 x86"
 S="${WORKDIR}/${MY_P}"
 
 LICENSE="BSD"
 SLOT="0"
 
+BDEPEND="
+        verify-sig? ( sec-keys/openpgp-keys-simeonsimeonov )
+"
+
 distutils_enable_tests pytest
 
+VERIFY_SIG_OPENPGP_KEY_PATH=${BROOT}/usr/share/openpgp-keys/simeonsimeonov.asc
+
 python_install_all() {
         distutils-r1_python_install_all
 }