source.mk: Pass explicit data file arg to gpg

Fixes:

    gpg: assuming signed data in 'gcc-8.3.0.tar.xz'

1 files changed, 2 insertions, 1 deletions

diff --git a/source.mk b/source.mk
index efd8aa9..9e9a8e7 100644
--- a/source.mk
+++ b/source.mk
@@ -48,7 +48,8 @@ $(source_archive):
 		$(gpg) --keyserver hkp://pool.sks-keyservers.net \
 			--recv-keys $(keys); \
 	rm -f ../keyring.gpg~; \
-	if ! $(gpg) --verify "$(upstream_archive).sig"; then \
+	if ! $(gpg) --verify "$(upstream_archive).sig" "$(upstream_archive)"; \
+	then \
 		rm -Rf gnupghome/; \
 		exit 1; \
 	fi