Skip to content

v0.5.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 19 Sep 14:26
· 5 commits to main since this release
v0.5.0
38806f3

Changelog

  • 38806f3 Signed releases with SBOMs, Homebrew cask, secretree demo

Verify

Every archive is listed in checksums.txt, which is signed with a keyless
Sigstore certificate bound to this repository's release workflow:

cosign verify-blob checksums.txt \
  --certificate checksums.txt.pem --signature checksums.txt.sig \
  --certificate-identity-regexp 'https://github.com/andraspalinkas/secretree/' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com
shasum -a 256 -c --ignore-missing checksums.txt
Assets 17
Loading