Skip to content

v0.7.0

Choose a tag to compare

@github-actions github-actions released this 19 Sep 16:40
· 2 commits to main since this release

Changelog

  • 2cc778f Protect collaboration history and detect vault rollbacks

Verify

Every archive is listed in checksums.txt, which is signed with a keyless
Sigstore certificate bound to this repository's release workflow:

cosign verify-blob checksums.txt \
  --certificate checksums.txt.pem --signature checksums.txt.sig \
  --certificate-identity-regexp 'https://github.com/andraspalinkas/secretree/' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com
shasum -a 256 -c --ignore-missing checksums.txt