Skip to content

v0.6.4

Choose a tag to compare

View all tags
@sammysheep sammysheep released this 14 May 18:02
· 22 commits to master since this release
Immutable release. Only release title and notes can be modified.
v0.6.4
7cf1932

0.6.4 - 2022-09-23

  • Updated docs and H1pdm09 module

Release asset verification

A signed SHA-256 checksum was added to the release asset currently hosted on GitHub. Download the archive, its .sha256 checksum, and its .sha256.sigstore.json signature bundle to the same directory.

Authenticate the checksum with Cosign:

cosign verify-blob flu-amd-LABEL-202209.zip.sha256 \
  --bundle flu-amd-LABEL-202209.zip.sha256.sigstore.json \
  --certificate-identity 'https://github.com/CDCgov/label/.github/workflows/backfill-release-checksums.yml@refs/heads/master' \
  --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' \
  --certificate-github-workflow-sha '3d4f0dd5e5b80e53737e537fd0adfc8a69696989'

Then verify the archive:

# Linux
sha256sum --check flu-amd-LABEL-202209.zip.sha256

# macOS
shasum --algorithm 256 --check flu-amd-LABEL-202209.zip.sha256

The expected SHA-256 digest is:

ddb32de66e2862cf3c0acb5301eb7c1731dfa5daacea31fced740cc77db8ef02  flu-amd-LABEL-202209.zip
Assets 5
Loading