Skip to content

v0.6.0

Choose a tag to compare

@github-actions github-actions released this 07 Aug 13:24
· 23 commits to main since this release
  • Refactor/build system and config file
  • Feat/detect latest version

🔐 Verifying the artifacts

All release artifacts (executables and packages for every OS) are included in the signed checksums.txt file.

How to verify:

  1. Download checksums.txt, checksums.txt.sig, and checksums.txt.pem from the release.
  2. Run this command:
cosign verify-blob \
  --cert checksums.txt.pem \
  --signature checksums.txt.sig \
  --certificate-identity "https://github.com/CPToolset/xcsp-launcher/.github/workflows/release.yml@refs/heads/main" \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com" \
  checksums.txt

If the output is Verified OK, you can then validate the integrity of the downloaded files:

sha256sum --ignore-missing -c checksums.txt