Skip to content

v0.1.0a16

Pre-release
Pre-release

Choose a tag to compare

@github-actions github-actions released this 07 May 09:52
· 89 commits to main since this release
  • no changes

🔐 Verifying the artifacts

To verify the integrity and authenticity of the downloaded files:

  1. Download the checksums.txt, checksums.txt.sig, and checksums.txt.pem files from this release.
  2. Use cosign to verify the signature:
cosign verify-blob \
  --cert checksums.txt.pem \
  --signature checksums.txt.sig \
  --certificate-identity "https://github.com/CPToolset/xcsp-launcher/.github/workflows/release.yml@refs/heads/main" \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com" \
  checksums.txt

If the output is Verified OK, you can now safely check the file hashes:

sha256sum --ignore-missing -c checksums.txt