[arch-general] ensuring integrity of sources (was: [arch-dev-public] todo list for moving http -> https sources)

[Ivy Foster]

On 31 Oct 2016, at  6:14 pm +0100, Bennett Piater wrote:
> I want to quickly chime in and say that I would really like
> authenticated buildscripts at some point :)

Any PKGBUILD kept in git can already optionally have this feature. See
git-commit(1), specifically, its --gpg-sign option.

iff