v0.1.0
Full changelog: https://github.com/eidon-go/pg-migrate/blob/main/CHANGELOG.md
Install the CLI:
go install github.com/eidon-go/pg-migrate/cmd/pg-migrate@v0.1.0Verifying this release
Artifacts are signed with cosign keyless: no
private key exists, the signature is bound to this workflow's identity and
recorded in the public Rekor transparency log.
cosign verify-blob checksums.txt \
--bundle checksums.txt.bundle \
--certificate-identity-regexp '^https://github\.com/eidon-go/pg-migrate/\.github/workflows/release\.yml@refs/tags/' \
--certificate-oidc-issuer https://token.actions.githubusercontent.com
# then check the archive against the verified checksums
sha256sum --check --ignore-missing checksums.txtThe container image is signed by digest:
cosign verify ghcr.io/eidon-go/pg-migrate:0.1.0 \
--certificate-identity-regexp '^https://github\.com/eidon-go/pg-migrate/\.github/workflows/release\.yml@refs/tags/' \
--certificate-oidc-issuer https://token.actions.githubusercontent.com