From f71e333d61962c6f010b72a2a63bc90ccc0e94d7 Mon Sep 17 00:00:00 2001
From: "Jan (janneke) Nieuwenhuizen" <janneke@gnu.org>
Date: Mon, 2 May 2022 11:37:27 +0200
Subject: [PATCH] build: Simple signature check for dist and release.

* build-aux/GNUmakefile.in (check-signature): New target.
(dist, release): Depend on it.
---
 build-aux/GNUmakefile.in | 7 +++++--
 1 file changed, 5 insertions(+), 2 deletions(-)

diff --git a/build-aux/GNUmakefile.in b/build-aux/GNUmakefile.in
index 5610e006..da48d36e 100644
--- a/build-aux/GNUmakefile.in
+++ b/build-aux/GNUmakefile.in
@@ -282,7 +282,10 @@ GIT_LS_FILES:=find
 MTIME:=0
 endif
 
-dist: $(TARBALL)
+check-signature:
+	git show HEAD --show-signature |grep 'gpg: Good signature'
+
+dist: check-signature $(TARBALL)
 
 sign-dist: $(TARBALL)
 	gpg -a --output $(TARBALL).sig --detach-sig $(TARBALL)
@@ -358,7 +361,7 @@ tag:
 guix-build:
 	./pre-inst-env $(GUIX) build mes@$(VERSION) --with-source=$(TARBALL)
 
-release: update-hash
+release: check-signature update-hash
 	git commit -m 'guix: mes: Update to $(VERSION).'			\
 	    -m '* guix/git/mes.scm (mes)[source]: Update to $(VERSION).'	\
 	    guix/git/mes.scm