The following block explains how to download and signature verify {{{software}}}.
{{mbox
| image = [[File:Ambox_warning_pn.svg.png|40px]]
| text = While git is cryptographically secure, it is <u>not</u> foolproof. See [
https://en.wikipedia.org/wiki/Web_of_trust Web of Trust] and [
https://forums.whonix.org/t/how-safe-are-signed-git-tags-only-as-safe-as-sha-1-or-somehow-safer/643 How safe are signed git tags? Only as safe as SHA-1 or somehow safer?] for further information.
}}
{{Box|text=
Run the following commands in {{{where}}}.
Retrieve the signing key. {{{footnote}}}
{{CodeSelect|code=
{{{key}}}
}}
Verify the key fingerprint.
{{CodeSelect|code=
{{{fingerprintcheck}}}
}}
Should show.
<blockquote>
{{{fingerprintresult}}}
</blockquote>
Import the key.
{{CodeSelect|code=
{{{keyimport}}}
}}
Get the source code.
{{CodeSelect|code=
{{{git}}}
}}
Navigate to the <code>{{{folder}}}</code> folder.
{{CodeSelect|code=
cd {{{folder}}}
}}
[[Warning#Always_Verify_Signatures|Always verify software signatures!]] Check the {{{software}}} signature.
{{CodeSelect|code=
{{{verification}}}
}}
Should show.
<blockquote>
{{{result}}}
</blockquote>
}}