Skip to content

Releases: cyphera-labs/cyphera-secure-send

Release list

v0.1.0

v0.1.0 Latest
Latest

Choose a tag to compare

View all tags
@github-actions github-actions released this 02 Oct 14:04
v0.1.0
f880690

Container: ghcr.io/cyphera-labs/cyphera-secure-send@sha256:5b2331e91d6a24dd62857bfff1fca2dd8fc181aa84751095c5b5242cb7733f2b
Helm chart: oci://ghcr.io/cyphera-labs/charts/securesend version 0.1.0

Binaries and SBOMs are signed with Sigstore; each carries a
.sigstore.json bundle beside it, and a build provenance attestation
bundle (.intoto.jsonl) is attached. Verify a file with:

cosign verify-blob --bundle FILE.sigstore.json \
  --certificate-identity-regexp 'https://github.com/cyphera-labs/cyphera-secure-send/' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com FILE

Verify the image with:

cosign verify ghcr.io/cyphera-labs/cyphera-secure-send@sha256:5b2331e91d6a24dd62857bfff1fca2dd8fc181aa84751095c5b5242cb7733f2b \
  --certificate-identity-regexp 'https://github.com/cyphera-labs/cyphera-secure-send/' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com

The chart is signed the same way. Its digest is sha256:08ffc79af7cc2cf123becf9284c866829476619036f0296146d728980f1f2e10; verify it with:

cosign verify ghcr.io/cyphera-labs/charts/securesend@sha256:08ffc79af7cc2cf123becf9284c866829476619036f0296146d728980f1f2e10 \
  --certificate-identity-regexp 'https://github.com/cyphera-labs/cyphera-secure-send/' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com
Assets 13