sign release tarballs

Author: Matheus Magalhães de Alcantara

deploy-build.sh

@@ -30,6 +30,7 @@ echo "Generating packages for amuletml $version…"
 # Generate an archive for the libraries:
 echo "Generating library archive…"
 tar -cJf result/amuletml-${version}-lib.tar.xz lib/
+gpg --armor --detach-sign result/amuletml-$version-lib.tar.xz
 
 # Generate an Arch Linux package if 'makepkg' was found in the path
 # Chaotic evil: we don't use makepkg
@@ -145,6 +146,7 @@ echo "echo \"Installed amuletml $version to \${PREFIX}\"" >> install.sh
 chmod 755 install.sh
 
 list_package_files | tar --no-recursion --null --files-from - -cf ../result/amuletml-$version-bindist.tar
+gpg --armor --detach-sign ../result/amuletml-$version-bindist.tar
 
 popd &>/dev/null