Skip to content

touchid-agent v0.6.0

Choose a tag to compare

@github-actions github-actions released this 13 Jun 20:41
· 71 commits to main since this release
v0.6.0
781cf0b

touchid-agent v0.6.0

macOS SSH agent backed by the Secure Enclave and Touch ID. Drop-in
replacement for yubikey-agent.

Changes since v0.5.0

  • Merge pull request #14 from ignaciojimenez/dependabot/go_modules/golang.org/x/crypto-0.53.0
  • Merge pull request #8 from ncode/juliano/harden-signing-policy-controls
  • deps: bump golang.org/x/crypto from 0.52.0 to 0.53.0
  • docs: align peer-check wording with signing-request enforcement
  • fix: harden signing controls against keyfile metadata tampering
  • Merge pull request #12 from ignaciojimenez/dependabot/go_modules/golang.org/x/sys-0.45.0
  • deps: bump golang.org/x/sys from 0.45.0 to 0.46.0
  • Merge pull request #13 from ignaciojimenez/dependabot/go_modules/golang.org/x/crypto-0.52.0
  • Merge branch 'main' into dependabot/go_modules/golang.org/x/crypto-0.52.0
  • Merge pull request #11 from ignaciojimenez/dependabot/github_actions/actions/upload-artifact-7
  • deps: bump golang.org/x/crypto from 0.51.0 to 0.52.0
  • ci: bump actions/upload-artifact from 4 to 7

Verifying this release

```
shasum -a 256 -c touchid-agent-VERSION-darwin-universal.tar.gz.sha256
```

The binary is signed with a Developer ID certificate and notarized by Apple.
Gatekeeper validates the notarization ticket online on first launch (flat
Mach-O CLI binaries cannot be stapled).

Installing

```
tar -xzf touchid-agent-VERSION-darwin-universal.tar.gz
sudo install -m 755 touchid-agent /usr/local/bin/
```

See README.md for SSH config and launchd setup.