Repository navigation
Changelog
- 65307e7 Report the real version in binaries built with go install
Verify
Every archive is listed in checksums.txt, which is signed with a keyless
Sigstore certificate bound to this repository's release workflow:
cosign verify-blob checksums.txt \
--certificate checksums.txt.pem --signature checksums.txt.sig \
--certificate-identity-regexp 'https://github.com/buildsnap-dev/secretree/' \
--certificate-oidc-issuer https://token.actions.githubusercontent.com
shasum -a 256 -c --ignore-missing checksums.txt