# Project Verification

Ensure the integrity of the projects you mirror by verifying all incoming data.
Projects can be verified using their PGP key or a custom method.

Custom methods are supported by through the use of external programs.  The
configured program is run with the project root as the first argument.  The
data is considered tainted if it returns with a non-zero Exit Code.