piace 0.7.0

Statically linked, CGO-free binaries for linux/amd64, linux/arm64,
darwin/amd64 and darwin/arm64.

Verifying this download

Verify the signature first. The checksum manifest shows only that a
download is intact; the signature over it is what says where it came
from, and it is produced by the publishing workflow itself, so it is
attached from the moment this release exists.

cosign verify-blob SHA256SUMS \
  --bundle SHA256SUMS.sigstore.json \
  --certificate-identity 'https://github.com/example42/piace/.github/workflows/ci.yml@refs/tags/v0.7.0' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com
sha256sum --check --ignore-missing SHA256SUMS   # shasum -a 256 on macOS
./piace-0.7.0-<os>-<arch> version

The binaries also carry a GitHub build provenance attestation naming the
workflow and commit that produced them:

gh attestation verify piace-0.7.0-linux-amd64 --repo example42/piace

SHA256SUMS.asc, a detached OpenPGP signature over the same manifest,
is attached separately for sites that require one. It is an extra, not the
verification path: see docs/release.md.

SHA256SUMS

2b3b8ebcf1dcb3185710e8fe1e6b25dd2e7dadc192cda29031c2f80daaf01ed6  piace-0.7.0-darwin-amd64
de66bca22fcb1147c8cf3a8ed391e3204d49b557fd8e346068337e005d7ee4bb  piace-0.7.0-darwin-arm64
6700ac13fa3cedfc6fe31710d78e0b9f56fcb2637d46ec78dbae720ce3bb66ef  piace-0.7.0-linux-amd64
9d749246cfc51a9484a4485199ae0a840f8a31c3ab22b87f3f5773c45a18a050  piace-0.7.0-linux-arm64