fix(install): verify tarball against PGP signature (#193)

kylef · Dec 23, 2024 · eaadbe0 · eaadbe0
1 parent f8aba8b
commit eaadbe0
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/libexec/swiftenv-install b/libexec/swiftenv-install
@@ -125,7 +125,7 @@ install_tar_binary() {
 
   if $verify; then
     curl -o "swift-$VERSION.sig" "$URL.sig"
-    gpg --verify "swift-$VERSION.sig"
+    gpg --verify "swift-$VERSION.sig" "swift-$VERSION.tar.gz"
   fi
 
   tar xzf "swift-$VERSION.tar.gz"