There's a merged pull request on the void-packages repository keybase: use hand-generated tarball https://github.com/void-linux/void-packages/pull/23472 Description: GitHub tarballs can be changed at anytime, which renders GitHub auto-generated tarball invalid at sometime [1] Use keybase manual generated tarball that is verified with their code signing key [2] [1] https://github.com/keybase/client/issues/10800 [2] https://keybase.io/docs/server_security/code_signing_key.asc --- @Vaelatern