From d5e779a198ccabae072652eaad0dcbc9a63bbecb Mon Sep 17 00:00:00 2001
From: Alad Wenter <alad@archlinux.org>
Date: Sat, 24 Oct 2020 10:53:24 +0200
Subject: [PATCH] aurutils: include signify public key as seperate file

---
 .SRCINFO     |  2 ++
 PKGBUILD     | 13 +++++--------
 aurutils.pub |  2 ++
 3 files changed, 9 insertions(+), 8 deletions(-)
 create mode 100644 aurutils.pub

diff --git a/.SRCINFO b/.SRCINFO
index 2a07b7d..1b5ec8f 100644
--- a/.SRCINFO
+++ b/.SRCINFO
@@ -18,8 +18,10 @@ pkgbase = aurutils
 	optdepends = vifm: build file interaction
 	source = aurutils-2.3.7.tar.gz::https://github.com/AladW/aurutils/archive/2.3.7.tar.gz
 	source = aurutils-2.3.7.tar.gz.signify::https://github.com/AladW/aurutils/releases/download/2.3.7/2.3.7.tar.gz.sig
+	source = aurutils.pub
 	sha256sums = bae2f7211cb80626f260e1ebcb2c061751407a03f1ab8898bc80182888502bef
 	sha256sums = SKIP
+	sha256sums = b952fc11638af129ac98c0924819f3b12fb0660d1d09b780fe1b245d8467cd66
 
 pkgname = aurutils
 
diff --git a/PKGBUILD b/PKGBUILD
index 075e72d..6a35497 100644
--- a/PKGBUILD
+++ b/PKGBUILD
@@ -7,22 +7,19 @@ url='https://github.com/AladW/aurutils'
 arch=('any')
 license=('custom:ISC')
 source=("$pkgname-$pkgver.tar.gz::$url/archive/$pkgver.tar.gz"
-        "$pkgname-$pkgver.tar.gz.signify::$url/releases/download/$pkgver/$pkgver.tar.gz.sig")
+        "$pkgname-$pkgver.tar.gz.signify::$url/releases/download/$pkgver/$pkgver.tar.gz.sig"
+        "aurutils.pub")
 depends=('git' 'jq' 'expac' 'diffstat' 'pacutils' 'wget')
 makedepends=('git' 'signify')
 optdepends=('bash-completion: bash completion'
             'devtools: aur-chroot'
             'vifm: build file interaction')
 sha256sums=('bae2f7211cb80626f260e1ebcb2c061751407a03f1ab8898bc80182888502bef'
-            'SKIP')
-_validsignifykey='RWQawitEue1JU2SxUyRD8LXP8m36QsbaHOkKfvZBfhj00EXBYiDZilp0'
+            'SKIP'
+            'b952fc11638af129ac98c0924819f3b12fb0660d1d09b780fe1b245d8467cd66')
 
 prepare() {
-    cat >aurutils-23.pub <<EOF
-untrusted comment: signify public key
-$_validsignifykey
-EOF
-    signify -V -p aurutils-23.pub -m "$pkgname-$pkgver".tar.gz \
+    signify -V -p aurutils.pub -m "$pkgname-$pkgver".tar.gz \
             -x "$pkgname-$pkgver".tar.gz.signify
 }
 
diff --git a/aurutils.pub b/aurutils.pub
new file mode 100644
index 0000000..165409f
--- /dev/null
+++ b/aurutils.pub
@@ -0,0 +1,2 @@
+untrusted comment: signify public key
+RWQawitEue1JU2SxUyRD8LXP8m36QsbaHOkKfvZBfhj00EXBYiDZilp0