Use Hbc::Verify in Hbc::Installer

as a distinct step serving the general purpose of verification, e.g. of
integrity with sha, authenticity with gpg…

lib/hbc/installer.rb

@@ -2,6 +2,7 @@
 
 require 'hbc/cask_dependencies'
 require 'hbc/staged'
+require 'hbc/verify'
 
 class Hbc::Installer
 
@@ -11,6 +12,7 @@ class Hbc::Installer
   # should be explicit checks on whether staged state is valid in
   # every method.
   include Hbc::Staged
+  include Hbc::Verify
 
   PERSISTENT_METADATA_SUBDIRS = [ 'gpg' ]
 
@@ -59,6 +61,7 @@ def install(force=false, skip_cask_deps=false)
     begin
       satisfy_dependencies(skip_cask_deps)
       download
+      verify
       extract_primary_container
       install_artifacts
       save_caskfile force
@@ -88,6 +91,10 @@ def download
     @downloaded_path
   end
 
+  def verify
+    Hbc::Verify.all(@downloaded_path, @cask)
+  end
+
   def extract_primary_container
     odebug "Extracting primary container"
     FileUtils.mkdir_p @cask.staged_path