diff --git a/pkgs/pull-scans/pull-scan.sh b/pkgs/pull-scans/pull-scan.sh
new file mode 100755
index 0000000..16de846
--- /dev/null
+++ b/pkgs/pull-scans/pull-scan.sh
@@ -0,0 +1,11 @@
+#!/usr/bin/env bash
+
+TMP=$(mktemp -d)
+
+scp "carbon.net.clerie.de:/var/lib/scan-to-gpg/*.asc" "${TMP}"
+
+find "${TMP}" -iname "*.asc" | gpg --decrypt-files
+
+find "${TMP}" -mindepth 1 -not -iname "*.asc" -type f | xargs mv -t .
+
+rm -r "${TMP}"