Skip to content

v1.9.1

Choose a tag to compare

View all tags
@github-actions github-actions released this 29 Jul 13:49
· 8 commits to main since this release
v1.9.1
4de38df
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

v1.9.1

Static stripped binaries for linux/{amd64,arm64} + darwin/{amd64,arm64}.

Verifying the release

# 1. fetch SHA256SUMS, SHA256SUMS.sig, SHA256SUMS.pem
# 2. verify signature (keyless OIDC, GitHub Actions issuer):
cosign verify-blob \
  --certificate SHA256SUMS.pem \
  --signature   SHA256SUMS.sig \
  --certificate-identity-regexp 'https://github.com/Intrinsec/s3proxy/.+' \
  --certificate-oidc-issuer     'https://token.actions.githubusercontent.com' \
  SHA256SUMS
# 3. verify your downloaded binary against SHA256SUMS:
sha256sum --check --ignore-missing SHA256SUMS

Each binary ships with a per-platform CycloneDX SBOM (*.sbom.cdx.json)
generated by syft against the actual binary.

Assets 14
Loading