diff --git a/roles/dch-yum/tasks/main.yml b/roles/dch-yum/tasks/main.yml
index ea32b48..adb5c2e 100644
--- a/roles/dch-yum/tasks/main.yml
+++ b/roles/dch-yum/tasks/main.yml
@@ -7,3 +7,10 @@
     mode: u=rw,go=r
   tags:
   - repo
+
+- name: ensure dch rpm gpg key is trusted
+  rpm_key:
+    key: https://files.pyrocufflink.blue/yum/dch/gnupg.pub
+    state: present
+  tags:
+  - rpm-key