We provide OpenPGP signatures ('.asc') files and checksums ('.sha512') for every release artifact. We recommend that you verify the integrity of downloaded files by generating your own checksums and match them against ours, and checking signatures using the KEYS file which contains the Grails...
