Skip to content

v0.15.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 16 Jul 16:01
v0.15.0
c98371c
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Added

  • SLSA build provenance for releases. Each release now publishes signed build provenance
    attestations     for its archives and checksums.txt (GitHub attest-build-provenance), so you
    can verify where and how a binary was built:
    gh attestation verify draugr_<ver>_<os>_<arch>.tar.gz --repo draugr-dev/draugr. This is on
    top of the existing cosign-signed checksums and SBOMs.
Assets 14
Loading