Skip to content

Scriptor v1.0.7

Latest
Latest

Choose a tag to compare

View all tags
@github-actions github-actions released this 30 Aug 10:09
· 1 commit to main since this release
v1.0.7
981d874

Verification notice

Every installer is bound to this tag by SHA-256, a CycloneDX 1.7 SBOM, a source-bound release receipt, and GitHub provenance/SBOM attestations.

Before running an installer:

  1. Download the installer, SHA256SUMS, scriptor.cyclonedx.json, release-receipt.json, and release-evidence-graph.json.
  2. Set installer to the downloaded filename and verify only its checksum: installer="<installer filename>"; grep -F " $installer" SHA256SUMS | sha256sum --check -.
  3. Verify GitHub provenance and SBOM attestations with gh attestation verify <installer> --repo AmirrezaFarnamTaheri/Scriptor.

Trust profile details are recorded per platform in the release receipt and evidence graph. Under native-signed, Windows installers are Authenticode-verified and macOS artifacts are Developer-ID-signed and notarized; Linux remains checksum/provenance-backed. Under unsigned, all installers remain explicitly unsigned. Full platform-specific verification commands are documented in docs/RELEASE-SECURITY.md at this tag.

Assets 24
Loading