From 6763a4ab446767f8944ec8b21b1e782f77f68d625bd6ca6922efe307be7202be Mon Sep 17 00:00:00 2001
From: Greg Freemyer <Greg.Freemyer@gmail.com>
Date: Tue, 14 Aug 2018 14:51:13 +0000
Subject: [PATCH] Accepting request 629230 from
 home:susnux:branches:security:forensics

- Fixed invalid source file (mismatching hash)
- Added GPG source verification

OBS-URL: https://build.opensuse.org/request/show/629230
OBS-URL: https://build.opensuse.org/package/show/security:forensics/artifacts?expand=0&rev=5
---
 artifacts-20180628.tar.gz     |   4 ++--
 artifacts-20180628.tar.gz.asc |  10 ++++++++++
 artifacts.changes             |   6 ++++++
 artifacts.keyring             | Bin 0 -> 1189 bytes
 artifacts.spec                |   6 ++++--
 5 files changed, 22 insertions(+), 4 deletions(-)
 create mode 100644 artifacts-20180628.tar.gz.asc
 create mode 100644 artifacts.keyring

diff --git a/artifacts-20180628.tar.gz b/artifacts-20180628.tar.gz
index 7c648fb..2593839 100644
--- a/artifacts-20180628.tar.gz
+++ b/artifacts-20180628.tar.gz
@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:a448f4c797dd182ae63afeb28e944bfe818fc991f063ad4ce0f9f704c85ad93f
-size 76190
+oid sha256:8ddf1013b4c0760df23178f6041587fc35594fbfe34f2e88227bfef55c06b7cd
+size 59921
diff --git a/artifacts-20180628.tar.gz.asc b/artifacts-20180628.tar.gz.asc
new file mode 100644
index 0000000..dd705ed
--- /dev/null
+++ b/artifacts-20180628.tar.gz.asc
@@ -0,0 +1,10 @@
+-----BEGIN PGP SIGNATURE-----
+
+iQEcBAABAgAGBQJbNSb0AAoJENliXl160Bd+yZQH/jf+lyA+fCYOwVTH2f4RIT1J
+x1/Djn1D/IlSCnT2aGGiaaEnKvWX1T1BNdbjQbOSj4uD+5fkJXaYYDcu98EOjz1C
+vsxZuU43k+AoNF2+yPYvy2ucCoHWCVUsmKPW23OTruyOhTxqKDZSVCTBxjEshbWl
+GLTpCtyUUOJUcRO2X6vYA66+XlEkdHhNp9LGBZYOi/PgQglupUUdrIkMiynrXMrn
+rwc+TKVIOz7F7Lw3KNTx5if4Py9f7sfCkY5YNTQGXLAMs/aJrO21qivlYJt8BJBA
+mFtfwnjmFwWj8XastSmEHcOsHeBaahzZEDQyxt+edNBjaoBQlUvy/MsLyAntPog=
+=xmKK
+-----END PGP SIGNATURE-----
diff --git a/artifacts.changes b/artifacts.changes
index b4f8f36..16fedcc 100644
--- a/artifacts.changes
+++ b/artifacts.changes
@@ -1,3 +1,9 @@
+-------------------------------------------------------------------
+Tue Aug 14 13:28:07 UTC 2018 - rpm@fthiessen.de
+
+- Fixed invalid source file (mismatching hash)
+- Added GPG source verification
+
 -------------------------------------------------------------------
 Thu Aug  9 16:58:41 UTC 2018 - rpm@fthiessen.de
 
diff --git a/artifacts.keyring b/artifacts.keyring
new file mode 100644
index 0000000000000000000000000000000000000000000000000000000000000000..e2dcd5f62d5299b29c2e0a466f9527ff6f642e56c5b914ab05a59c7730bddbb7
GIT binary patch
literal 1189
zcmV;W1X}x<0SyFHpV%q^2mr}C;M%;Gh|q{ZK5`hMU)g+3n_l^mB*Bkr#Wf$GiE0Go
zbMh)m<td6RdmY9g$YwjJbGrvssh%EbmCZMFRkq5+=Q>Xf%_^1`_#0S;8%7TXPz2z7
zY`ZpsBBS_Q234dpO3y;Bz#y*un@P4)hCsOk+L!>i%fbDR^s-D+HGu<O6Bd3iz{K4M
z(#L^-RtETS_fSCm2AYG2fTXT<lX{@|j*sIE-zasy{yhthLWL!bSZKlP&GQww?n^*8
z^K%6}k0L-|yd~!*Kx^sE!>CBPGEOx6zE_1{X&;ZnbQB&zt77?0J+Ssv3KBckP4E93
zi&uhim&?QOsTO9BV4naH0RRECB}#8$V`yn@AWda-dLTS%Z((C-X>BfTWpsK#XKi6=
zY%XJOZ9a(sIRp~{0stcg0#u*aDgqk=2MY-Z2Ll2D1{DYb2?`4Y76JnS0v-VZ7k~f?
z2@u(0UR`?77k)rs2mrWS_MNIzSV}^<R5}zCGYmvG-&I$%S<~fPv%@8HbVouDYP<&z
z;Ynk7?KBOprlOMxdAlXF5jXkxLbuyIk?YV(0T;N2>O}ZNsvII`BDlg@kB8HuQH^!Y
zB1EZqw89(fgklqp*M#2h>-rB-s;h2sc@b|!XJ9HhB*bvHlYpYctjTZL(&H6)JdJUU
z#W^O6phPbwoX!P-fImpy*UY_g?7)s{^&4p=M?9bh)$>@Jd|A3t;w?iHI!MhHETRjQ
zauBMhkm7)w0&WpJk~l{S31A3ZB<Yl1uoMfL8-_U_^$IjZoYgQ=?m=+kMP63r&`bUs
zJu^X7SUhjCCQZ2k4Fpu5*eU@C0L~0wxI=l@hHKNMR#S&w;A1e5sNu?T+>^qEpwU>J
znPr2PYeNNpAzB?@j%^A-?DJu$9d-!iK6fCi`ZBH?>e=xI-ghD9s$23;c)y~hgfD(d
zf<VAp3@z}6@>CZAA<7o}cPx^Lg)QZ1;`7bU5H=Nt?4)bLBb=v>+m3?#$L~v1Q6w3Z
zbvVJ6VWMWDK^#3ZT!gV8FS86r*IGVkeMe{fH@B*9`HD4=vC7{)YkaV|s!O$pxpfo7
zo|5#?_1*U4CBVk=xW^CcK&ZIEMyjHo1ccU2-!DGQ{tB3!wAOG=hPLD&hJt~n+LQTl
zt4ww=_eeHgf0HDtu5M*N=>QP{00D^s9|RZy0ssjG0#u*aDgqk}0162Z*<xN@de9es
zC_M-I11qx@&a@1w<#lf@DE4tmYS5tJ3g#cM)nyPxJITmSLJ%zIa4x*Fj-wh$ZZWPf
zA2351f%Xc8fT?<C5H1vo@NJcw9<$xAcB@S0N|voD8ksySf(up3q3<0<zBwp~E?b5J
zR;Hg@6=?+kApcJiPwMRm{Z}_FC}26=MR4fQKe2|L_<|t!ny&BP1{aCzw<bNF6d?73
zKj<xj7olk+l_fO8*PGn&+eb@s;3of^@Kd~KHMM+m&Ak#Tt3)SBF^@ki`r;S2!^K1z
z+yE)GR%lsiE#W>;ZZLROliJ9M-Vu~t2w5$qBj8nn=J0mtHFu?H)RT1UNlQW6p#02E
DS&|e<

literal 0
HcmV?d00001

diff --git a/artifacts.spec b/artifacts.spec
index ab0725d..c2637c6 100644
--- a/artifacts.spec
+++ b/artifacts.spec
@@ -24,7 +24,10 @@ Summary:        Digital Forensics Artifact Repository
 License:        Apache-2.0
 Group:          Productivity/Security
 URL:            https://github.com/ForensicArtifacts/artifacts/wiki
-Source:         https://github.com/ForensicArtifacts/artifacts/releases/download/%{timestamp}/artifacts-%{timestamp}.tar.gz
+Source0:        https://github.com/ForensicArtifacts/artifacts/releases/download/%{timestamp}/artifacts-%{timestamp}.tar.gz
+Source1:        https://github.com/ForensicArtifacts/artifacts/releases/download/%{timestamp}/artifacts-%{timestamp}.tar.gz.asc
+# Key 0xD9625E5D7AD0177E by Joachim Metz https://github.com/joachimmetz
+Source2:        %{name}.keyring
 BuildArch:      noarch
 
 %description
@@ -69,7 +72,6 @@ python setup.py install --root=%{buildroot} --prefix=%{_prefix}
 
 %files validator
 %license LICENSE
-%doc ACKNOWLEDGEMENTS AUTHORS README docs/*
 %{python_sitelib}/artifacts-%{timestamp}-py2.7.egg-info
 %{python_sitelib}/artifacts
 %{_bindir}/validator.py