Skip to content

postflight CLI v0.2.0

Latest
Latest

Choose a tag to compare

View all tags
@guardian-promotions guardian-promotions released this 26 Jul 23:55
postflight-cli/v0.2.0
52425d7
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Release 0.2.0 of the postflight CLI.

  • Artifact: ghcr.io/guardian-intelligence/postflight-cli@sha256:f8c69a8da836247d50221c66a3bf5843da891617151db1ccf309574d780d6030
  • Source commit: 52425d7
  • Binaries digest: 7df9c054e240b1ba3a7691eb71a3c42c1b2701aa58c4712b59e9b43a628155c6
  • Sources: postflight-0.2.0-src.tar.gz (make && sudo make install)

Verify any binary before running it:

cosign verify-blob --bundle postflight-<target>.sigstore.json \
  --certificate-identity https://github.com/guardian-intelligence/guardian/.github/workflows/postflight-cli-image.yml@refs/heads/main \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  postflight-<target>

install.sh is attached too, signed by the release lane, so the installer can be verified before it is run rather than piped in from the website:

cosign verify-blob --bundle install.sh.sigstore.json \
  --certificate-identity https://github.com/guardian-intelligence/guardian/.github/workflows/postflight-cli-release.yml@refs/heads/main \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  install.sh
Assets 14
Loading