Describe the feature or problem you’d like to solve

The official release RPM package is not signed and gives the following warning when installed via zypper:

gh_0.7.0_linux_amd64.rpm:
    Package is not signed!

gh-0.7.0-1.x86_64 (Lokal): Signature verification failed [6-File is unsigned]

Proposed solution

The package should be signed using a gpg key and the key should be made available for importing it to the keychain before installing.