Changelog
- 47de1f2 mitm: strip default port from outbound Host header so signature schemes match (#195)
Verify
# Verify checksum (portable across macOS and Linux)
shasum -a 256 --ignore-missing -c checksums.txt
# Verify signature (requires cosign v2+)
cosign verify-blob \
--bundle checksums.txt.sig \
--certificate-identity-regexp "^https://github\.com/Infisical/agent-vault/\.github/workflows/release\.yml@refs/tags/" \
--certificate-oidc-issuer "https://token.actions.githubusercontent.com" \
checksums.txt
