Skip to content

Step SDS v0.2.2-rc13 (${RELEASE_DATE})

Pre-release
Pre-release
Compare
Choose a tag to compare
@github-actions github-actions released this 26 Oct 04:55
5c40aa0

Signatures and Checksums

step-sds uses sigstore/cosign for signing and verifying release artifacts.

Below is an example using cosign to verify a release artifact:

cosign verify-blob \
  --certificate ~/Downloads/step-sds_darwin_0.2.2-rc13_amd64.tar.gz.pem \
  --signature ~/Downloads/step-sds_darwin_0.2.2-rc13_amd64.tar.gz.sig \
  ~/Downloads/step-sds_darwin_0.2.2-rc13_amd64.tar.gz

The checksums.txt file (in the 'Assets' section below) contains a checksum for every artifact in the release.

Changelog

  • 5c40aa0 [action] keyless cosign for all release artifacts

Thanks!

Those were the changes on v0.2.2-rc13!

Come join us on Discord to ask questions, chat about PKI, or get a sneak peak at the freshest PKI memes.