Add signature verification

OBS-URL: https://build.opensuse.org/package/show/KDE:Frameworks5/discover?expand=0&rev=145

discover-5.13.90.tar.xz.sig

@@ -0,0 +1,11 @@
+-----BEGIN PGP SIGNATURE-----
+
+iQEzBAABCgAdFiEELR1bBYg1d4fenuIl7JTRj38FmX4FAluaky8ACgkQ7JTRj38F
+mX5f9wgAmWf1W+EPrElLYXxob4KtKmw523WFE5xYHXg8Tth8fOjJlmUDAqY8VxtU
+qhDpIXDHrCj/srj+cGiZarqaYWZvogF970L2aL/i94IZDA+yXZSzOsZ+QKZFBEPq
+WRxF63TRceS8vDsgqyP6QMUAFkMYDyJ3f5w5AqjXUUKuVsF+ntagSoghJfVpKPcA
+Zm66h1WXIRJ97trUSrRA67rE27JdWTa3+Vp1PwFko2CAgFTBq9hadAVT6AaKf5qu
+aeer9ALFP8gV6X9ea33+j/Qq3tW1g1QFBKxK7uFqW1TmdHgK7glSMcSVHPyRuTUx
+5no06NSJ5TOerKWQg0E1wRF8luNAPg==
+=SWRh
+-----END PGP SIGNATURE-----

discover.changes

@@ -1,3 +1,9 @@
+-------------------------------------------------------------------
+Sat Sep 15 16:25:26 UTC 2018 - fabian@ritter-vogt.de
+
+- Add tarball signature and keyring containing keys of release managers
+  Jonathan Riddell and Bhushan Shah
+
 -------------------------------------------------------------------
 Sat Sep 15 14:19:10 UTC 2018 - Wolfgang Bauer <wbauer@tmo.at>
 

discover.spec

@@ -25,6 +25,10 @@ License:        GPL-2.0-only AND GPL-3.0-only AND GPL-3.0-or-later
 Group:          System/GUI/KDE
 Url:            https://quickgit.kde.org/?p=discover.git
 Source:         http://download.kde.org/unstable/plasma/%{version}/discover-%{version}.tar.xz
+%if %{with lang}
+Source1:        http://download.kde.org/unstable/plasma/%{version}/discover-%{version}.tar.xz.sig
+Source2:        plasma.keyring
+%endif
 # PATCH-FIX-OPENSUSE
 Patch1:         0001-Warning-for-FlatHub.patch
 %if 0%{?suse_version} < 1330