diff --git a/Makefile b/Makefile
index 18e1d2a..5287a88 100644
--- a/Makefile
+++ b/Makefile
@@ -1,6 +1,11 @@
 VERSION:= v0.1.0
 
-all: clean sign trust
+all: clean deps sign trust
+
+deps:
+	if [[ ! -d sha256_literal ]]; then \
+		git clone https://github.com/aguinet/sha256_literal || exit 1; \
+	fi
 
 trust:
 	if [[ ! -f generator-$(VERSION) ]]; then \
diff --git a/README.md b/README.md
index 7744564..64fa739 100644
--- a/README.md
+++ b/README.md
@@ -46,6 +46,10 @@ The post extraction hook is passed to `/bin/sh`, with some input changes:
 
 ## Building
 To build the `sfexec` binary, g++ is used, along with [sha256_literal] for verifying the post-extraction hook.
+To clone `sha256_literal` run:
+``` shell
+$ make deps
+```
 Included in the repo is a pre-built generator binary, signed with [my GPG key] at `generator-v<version>.gpg` with a checksum in `generator-v<version>.sha256`. Alternatively you can build it yourself like so:
 
 [sha256_literal]: https://github.com/aguinet/sha256_literal
diff --git a/generator-v0.1.0.gpg b/generator-v0.1.0.gpg
index c524d72..3c91d5a 100644
Binary files a/generator-v0.1.0.gpg and b/generator-v0.1.0.gpg differ
diff --git a/get-deps b/get-deps
deleted file mode 100755
index 15d0075..0000000
--- a/get-deps
+++ /dev/null
@@ -1,3 +0,0 @@
-#!/bin/bash
-
-git clone https://github.com/aguinet/sha256_literal