rm-secure v0.1.0

Changelog

• 0000001 init 1

Verify

Important

It is strongly recommended to verify the integrity and security of the release assets before executing them. This helps mitigate potential risks associated with running unverified files.

First, verify the file using checksums.

sha256sum --check --ignore-missing rm-secure_v0.1.0-checksums.txt

Then, ensure the authenticity of the release asset with Sigsum:

Note

You need to have sigsum-verify CLI installed.

go install sigsum.org/sigsum-go/cmd/sigsum-verify@v0.11.2

sigsum-verify -k rm-secure-sigsum-key.pub -p sigsum-trust-policy.txt \
  rm-secure_v0.1.0-OS_ARCH.proof < rm-secure_v0.1.0-OS_ARCH