Skip to content

Actualyze CLI v12.1.0

Choose a tag to compare

View all tags
@atlas-release-please atlas-release-please released this 04 Sep 11:35
Immutable release. Only release title and notes can be modified.
cli/v12.1.0
086805d
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Actualyze CLI v12.1.0

Install

Linux/macOS:

curl -fsSL https://github.com/actualyze-ai/cli/releases/download/cli/v12.1.0/install.sh | sh

Windows PowerShell:

irm https://github.com/actualyze-ai/cli/releases/download/cli/v12.1.0/install.ps1 | iex

Verify

The install scripts verify SHA-256 checksums automatically; checksums.txt covers every binary. Every asset also carries GitHub build-provenance attestation, verifiable by anyone — and verification is digest-based, so it works on your installed aai executable, not just on downloaded assets. Download this release's attestation bundle, then verify the installed command in place:

gh release download cli/v12.1.0 --repo actualyze-ai/cli --pattern attestations.jsonl
gh attestation verify "$(command -v aai)" \
  --bundle attestations.jsonl \
  --repo actualyze-ai/atlas \
  --signer-workflow actualyze-ai/atlas/.github/workflows/cli-release.yml

On Windows, verify (Get-Command aai).Source; to verify a downloaded asset instead, pass its filename (e.g. aai-linux-x64). This proves the exact bytes were built by the Actualyze CLI release workflow, independent of this download channel — gh fetches the Sigstore trusted root on its own via TUF; do not source a trusted root from this release. Air-gapped verification: run gh attestation trusted-root > trusted_root.jsonl on a trusted online machine, then add --custom-trusted-root trusted_root.jsonl.

Assets 15
Loading