Skip to content

piace 0.3.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 01 Sep 19:52
· 31 commits to main since this release
v0.3.0
e68ad3e
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Statically linked, CGO-free binaries for linux/amd64, linux/arm64,
darwin/amd64 and darwin/arm64.

Verifying this download

Verify the signature first. The checksum manifest shows only that a
download is intact; the signature over it is what says where it came
from, and it is produced by the publishing workflow itself, so it is
attached from the moment this release exists.

cosign verify-blob SHA256SUMS \
  --bundle SHA256SUMS.sigstore.json \
  --certificate-identity 'https://github.com/example42/piace/.github/workflows/ci.yml@refs/tags/v0.3.0' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com
sha256sum --check --ignore-missing SHA256SUMS   # shasum -a 256 on macOS
./piace-0.3.0-<os>-<arch> version

The binaries also carry a GitHub build provenance attestation naming the
workflow and commit that produced them:

gh attestation verify piace-0.3.0-linux-amd64 --repo example42/piace

SHA256SUMS.asc, a detached OpenPGP signature over the same manifest,
is attached separately for sites that require one. It is an extra, not the
verification path: see docs/release.md.

SHA256SUMS

69da4370659c1034e85044850e2bb268b5bf939cb074c4166f4440b9fa0df8e6  piace-0.3.0-darwin-amd64
bd588ffe5f2fa799edd75ece1e8eeafe17051631341f4717ec1339b2cce1b080  piace-0.3.0-darwin-arm64
62046eb71d77681ef226cbee30a6f8ee68f9281b06dc9335609b47007cc4e985  piace-0.3.0-linux-amd64
d17d1b58678a525c0b3a005903ee167ac60700a5a02dc21e4cf8d424ee2b66c6  piace-0.3.0-linux-arm64
Assets 8
Loading