diff --git a/README.md b/README.md index 9b4d75dc..09881da2 100644 --- a/README.md +++ b/README.md @@ -32,9 +32,15 @@ Then run a `minisign` command in that directory: minisign -Vm configlet_4.0.0-beta.13_linux_x86-64.tar.gz -P RWQGj6DTXgYLhKvWJMGtbDUrZerawUcyWnti9MGuWMx7VDW9DqZn2tMZ ``` -where the above argument to `-P` is the configlet public key. +where the above argument to `-P` is the [configlet public key](https://github.com/exercism/configlet/blob/009dc9df9d947e71ff039ac2af0f82315dbf9073/configlet-minisign.pub). -The above command has verified the release archive if (and only if) the command's output contains `Signature and comment signature verified`. +The above command has verified the release archive if (and only if) the command's output begins with `Signature and comment signature verified`. +For example: + +```text +Signature and comment signature verified +Trusted comment: timestamp:2023-08-09T10:27:15Z file:configlet_4.0.0-beta.13_linux_x86-64.tar.gz hashed +``` Then extract the archive to obtain the (now-verified) configlet executable. You may delete the archive and the `.minisig` file.