Repository navigation
touchid-agent v0.6.0
touchid-agent v0.6.0
macOS SSH agent backed by the Secure Enclave and Touch ID. Drop-in
replacement for yubikey-agent.
Changes since v0.5.0
- Merge pull request #14 from ignaciojimenez/dependabot/go_modules/golang.org/x/crypto-0.53.0
- Merge pull request #8 from ncode/juliano/harden-signing-policy-controls
- deps: bump golang.org/x/crypto from 0.52.0 to 0.53.0
- docs: align peer-check wording with signing-request enforcement
- fix: harden signing controls against keyfile metadata tampering
- Merge pull request #12 from ignaciojimenez/dependabot/go_modules/golang.org/x/sys-0.45.0
- deps: bump golang.org/x/sys from 0.45.0 to 0.46.0
- Merge pull request #13 from ignaciojimenez/dependabot/go_modules/golang.org/x/crypto-0.52.0
- Merge branch 'main' into dependabot/go_modules/golang.org/x/crypto-0.52.0
- Merge pull request #11 from ignaciojimenez/dependabot/github_actions/actions/upload-artifact-7
- deps: bump golang.org/x/crypto from 0.51.0 to 0.52.0
- ci: bump actions/upload-artifact from 4 to 7
Verifying this release
```
shasum -a 256 -c touchid-agent-VERSION-darwin-universal.tar.gz.sha256
```
The binary is signed with a Developer ID certificate and notarized by Apple.
Gatekeeper validates the notarization ticket online on first launch (flat
Mach-O CLI binaries cannot be stapled).
Installing
```
tar -xzf touchid-agent-VERSION-darwin-universal.tar.gz
sudo install -m 755 touchid-agent /usr/local/bin/
```
See README.md for SSH config and launchd setup.