v1.2.2
Verifying this release
This release is signed with Sigstore using GitHub Actions OIDC (keyless).
The npm package additionally carries an npm provenance attestation.
# Verify the tarball signature
cosign verify-blob ainonymous-1.2.2.tgz \
--bundle ainonymous-1.2.2.tgz.sigstore.json \
--certificate-identity "https://github.com/A-Som-Dev/ainonymous/.github/workflows/release.yml@refs/tags/v1.2.2" \
--certificate-oidc-issuer "https://token.actions.githubusercontent.com"
# Verify the npm package provenance (run this from a project that has ainonymous installed)
npm audit signaturesSee SECURITY.md for the full verification guide.
Full Changelog: v1.2.1...v1.2.2