diff --git a/setools-4.5.1.tar.bz2.sha256.asc b/setools-4.5.1.tar.bz2.sha256.asc
new file mode 100644
index 0000000..c90bf8d
--- /dev/null
+++ b/setools-4.5.1.tar.bz2.sha256.asc
@@ -0,0 +1,11 @@
+-----BEGIN PGP SIGNED MESSAGE-----
+Hash: SHA512
+
+25e47d00bbffd6046f55409c9ba3b08d9b1d5788cc159ea247d9e0ced8e482e7  setools-4.5.1.tar.bz2
+-----BEGIN PGP SIGNATURE-----
+
+iHUEARYKAB0WIQSFZJCJyfOFs19AVo0haY/SnUNVpAUCZuhwhAAKCRAhaY/SnUNV
+pPFLAQCxeYSAb83UT/lCMuJqInvnq/n9FfmfniCgu1HuLEmvKgEAkCGSVFtSAe6C
+q+Mu17dAOACwnCYo+aK6eXXuJd3ABQo=
+=S2WE
+-----END PGP SIGNATURE-----
diff --git a/setools.changes b/setools.changes
index 0b2060e..433672d 100644
--- a/setools.changes
+++ b/setools.changes
@@ -1,3 +1,9 @@
+-------------------------------------------------------------------
+Wed Sep 18 14:17:31 UTC 2024 - Filippo Bonazzi <filippo.bonazzi@suse.com>
+
+- Add upstream tarball signature
+- Add key 85649089C9F385B35F40568D21698FD29D4355A4 to setools.keyring
+
 -------------------------------------------------------------------
 Tue May 28 11:19:10 UTC 2024 - Cathy Hu <cathy.hu@suse.com>
 
diff --git a/setools.keyring b/setools.keyring
new file mode 100644
index 0000000..624582a
--- /dev/null
+++ b/setools.keyring
@@ -0,0 +1,35 @@
+-----BEGIN PGP PUBLIC KEY BLOCK-----
+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+=XJN+
+-----END PGP PUBLIC KEY BLOCK-----
diff --git a/setools.spec b/setools.spec
index 9e32c0a..9f1a042 100644
--- a/setools.spec
+++ b/setools.spec
@@ -31,7 +31,9 @@ Summary:        Policy analysis tools for SELinux
 License:        GPL-2.0-only
 Group:          System/Management
 Source:         https://github.com/SELinuxProject/setools/releases/download/%{version}/%{name}-%{version}.tar.bz2
-Source2:        README.SUSE
+Source2:        https://github.com/SELinuxProject/setools/releases/download/%{version}/%{name}-%{version}.tar.bz2.sha256.asc
+Source3:        setools.keyring
+Source4:        README.SUSE
 BuildRequires:  %{python_module Cython >= 0.29.14}
 BuildRequires:  %{python_module devel >= 3.10}
 BuildRequires:  %{python_module setuptools}