From 35b878092a7b92ee58c13484776190a45efbec62 Mon Sep 17 00:00:00 2001
From: "hinto.janai" <hinto.janai@protonmail.com>
Date: Mon, 27 Mar 2023 13:58:57 -0400
Subject: [PATCH] download.yml: verify pgp key

---
 .github/workflows/download.yml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/.github/workflows/download.yml b/.github/workflows/download.yml
index 1ab11f3..d5d901f 100644
--- a/.github/workflows/download.yml
+++ b/.github/workflows/download.yml
@@ -35,6 +35,8 @@ jobs:
       run: wget --content-disposition "https://gupax.io/sha256sums"
     - name: Download PGP key
       run: wget --content-disposition "https://gupax.io/hinto"
+    - name: Verify PGP key
+      run: bash -c "[[ $(sha256sum "hinto.asc" | awk '{print $1}') == 02242a2c4b4dfb2f49d30a15630a301c72910e6e5c212d432c8b7ff438696b00 ]]"
     - name: Import PGP key
       run: gpg --import hinto.asc
     - name: Verify Hashes