Changelog
- e3ade65 fix(auth): prevent account takeover via unverified registration password overwrite (#230)
Verify
# Verify checksum (portable across macOS and Linux)
shasum -a 256 --ignore-missing -c checksums.txt
# Verify signature (requires cosign v2+)
cosign verify-blob \
--bundle checksums.txt.sig \
--certificate-identity-regexp "^https://github\.com/Infisical/agent-vault/\.github/workflows/release\.yml@refs/tags/" \
--certificate-oidc-issuer "https://token.actions.githubusercontent.com" \
checksums.txt
