Skip to content

postflight CLI v0.2.0-rc.1

Pre-release
Pre-release

Choose a tag to compare

View all tags
@guardian-promotions guardian-promotions released this 26 Jul 21:44
postflight-cli/v0.2.0-rc.1
87ce281
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Release candidate 0.2.0-rc.1 of the postflight CLI.

  • Artifact: ghcr.io/guardian-intelligence/postflight-cli@sha256:1c61b15daaeab034d6e85bcac397be1a5b458e89b9422f55d2cdd59baa36f460
  • Source commit: 87ce281
  • Binaries digest: 93771c5495e0cfe0f61b1d977f6e6a1d16577d83d21e44163d77e95b4b39c94d
  • Sources: postflight-0.2.0-rc.1-src.tar.gz (make && sudo make install)

Verify any binary before running it:

cosign verify-blob --bundle postflight-<target>.sigstore.json \
  --certificate-identity https://github.com/guardian-intelligence/guardian/.github/workflows/postflight-cli-image.yml@refs/heads/main \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  postflight-<target>

install.sh is attached too, signed by the release lane, so the installer can be verified before it is run rather than piped in from the website:

cosign verify-blob --bundle install.sh.sigstore.json \
  --certificate-identity https://github.com/guardian-intelligence/guardian/.github/workflows/postflight-cli-release.yml@refs/heads/main \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  install.sh
Assets 14
Loading