Repository navigation
v0.1.0a16
Pre-release
Pre-release
- no changes
🔐 Verifying the artifacts
To verify the integrity and authenticity of the downloaded files:
- Download the
checksums.txt,checksums.txt.sig, andchecksums.txt.pemfiles from this release. - Use
cosignto verify the signature:
cosign verify-blob \
--cert checksums.txt.pem \
--signature checksums.txt.sig \
--certificate-identity "https://github.com/CPToolset/xcsp-launcher/.github/workflows/release.yml@refs/heads/main" \
--certificate-oidc-issuer "https://token.actions.githubusercontent.com" \
checksums.txtIf the output is Verified OK, you can now safely check the file hashes:
sha256sum --ignore-missing -c checksums.txt