Skip to content

v0.43.3
Compare
Choose a tag to compare
@github-actions github-actions released this 06 Sep 15:27
· 39 commits to develop since this release
v0.43.3
e3b6119
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Learn about vigilant mode.

Installation and signature verification

Installation

By downloading binary from the release

For instance, if you are using Linux on an AMD64 architecture:

# Download the binary
curl -LO https://github.com/carvel-dev/kbld/releases/download/v0.43.3/kbld-linux-amd64

# Move the binary in to your PATH
mv kapp-linux-amd64 /usr/local/bin/kbld

# Make the binary executable
chmod +x /usr/local/bin/kbld

Via Homebrew (macOS or Linux)

$ brew tap carvel-dev/carvel
$ brew install kbld
$ kbld version

Verify checksums file signature

The checksums file provided within the artifacts attached to this release is signed using Cosign with GitHub OIDC(Refer this page for cosign installation). To validate the signature of this file, run the following commands:

# Download the checksums file, certificate and signature
curl -LO https://github.com/carvel-dev/kbld/releases/download/v0.43.3/checksums.txt
curl -LO https://github.com/carvel-dev/kbld/releases/download/v0.43.3/checksums.txt.pem
curl -LO https://github.com/carvel-dev/kbld/releases/download/v0.43.3/checksums.txt.sig

# Verify the checksums file
cosign verify-blob checksums.txt \
  --certificate checksums.txt.pem \
  --signature checksums.txt.sig \
  --certificate-identity-regexp=https://github.com/carvel-dev \
  --certificate-oidc-issuer=https://token.actions.githubusercontent.com

Verify binary integrity

To verify the integrity of the downloaded binary, you can utilize the checksums file after having validated its signature.

# Verify the binary using the checksums file
sha256sum -c checksums.txt --ignore-missing

✨ What's new

  • Fixed CVEs in #508

Full Changelog: v0.43.2...v0.43.3

📂 Files Checksum

0016c009021c52d373eb212cf8c09bd8a6ce09160e70a4eebd7f0bff22fb9497  ./kbld-linux-arm64
2a207c8a8a4ae43999453effb4a82d11363dd09d7d02af76b7f504ecc0d90cec  ./kbld-linux-amd64
307e14ec84f846f9cc89bbb4ee4ac88a6f9c77432b8fe4ce4b30ff455eac74b0  ./kbld-windows-arm64.exe
7716e291369589c6d43f4da8cf7e3c50c074e6352d6c788e3d2fd76b44cb15ad  ./kbld-darwin-arm64
b62dd7e54bad79a744392d4c964b3c447549ec5b9bb4621c6a18c35eb8ba95d7  ./kbld-darwin-amd64
e3888a7db965374ad7d283190386648db13d1f5fba4be483f8351e039bfe7e37  ./kbld-windows-amd64.exe
Assets 11
Loading