v0.7.0

Changelog

• 2cc778f Protect collaboration history and detect vault rollbacks

Verify

Every archive is listed in checksums.txt, which is signed with a keyless
Sigstore certificate bound to this repository's release workflow:

cosign verify-blob checksums.txt \
  --certificate checksums.txt.pem --signature checksums.txt.sig \
  --certificate-identity-regexp 'https://github.com/andraspalinkas/secretree/' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com
shasum -a 256 -c --ignore-missing checksums.txt

v0.6.0

Changelog

• bc991bb Join through the vault, member names, QR recovery kit, redesigned UI with activity

Verify

Every archive is listed in checksums.txt, which is signed with a keyless
Sigstore certificate bound to this repository's release workflow:

cosign verify-blob checksums.txt \
  --certificate checksums.txt.pem --signature checksums.txt.sig \
  --certificate-identity-regexp 'https://github.com/andraspalinkas/secretree/' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com
shasum -a 256 -c --ignore-missing checksums.txt

v0.5.0

Changelog

• 38806f3 Signed releases with SBOMs, Homebrew cask, secretree demo

Verify

Every archive is listed in checksums.txt, which is signed with a keyless
Sigstore certificate bound to this repository's release workflow:

cosign verify-blob checksums.txt \
  --certificate checksums.txt.pem --signature checksums.txt.sig \
  --certificate-identity-regexp 'https://github.com/andraspalinkas/secretree/' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com
shasum -a 256 -c --ignore-missing checksums.txt

v0.4.0

Changelog

• a2cad65 staticcheck fixes; decisions 0033-0034
• e2912c9 doctor, pr diff/checkout, auto-push on pr open; UI: dark mode, highlighting, Markdown, ledger and vault pages, proof badge

v0.3.0

Changelog

• a6432cd Point README and usage at secretree.dev
• b02491e cli: current tagline and docs link in usage
• 0e34be9 Harden for release: key store writes via stdin, Linux Secret Service, portable shell, helper install without symlinks