Repository navigation
touchid-agent v0.9.2
macOS SSH agent backed by the Secure Enclave and Touch ID. Drop-in
replacement for yubikey-agent.
Changes since v0.9.1
- deps: bump golang.org/x/{crypto,term,sys} to latest patch (#43)
- Merge pull request #39 from ignaciojimenez/fix/checkout-persist-credentials
- fix(ci): stop persisting GITHUB_TOKEN in read-only checkouts
- Merge pull request #38 from ignaciojimenez/fix/aikido-security-sast-106533960-5xgc
- fix(security): autofix Overly Broad Permissions in GitHub Actions Workflows is risky
- Merge pull request #37 from ignaciojimenez/chore/repo-cleanup
- build: unpin stale govulncheck and always install the pinned version
- Merge #33: bump actions/setup-go from 6 to 7
- Merge #29: bump actions/checkout from 6 to 7
- Merge pull request #36 from ignaciojimenez/docs/release-clarify-fallback
- Merge pull request #34 from ignaciojimenez/dependabot/go_modules/golang.org/x/crypto-0.55.0
- docs: warn that the manual release path duplicates CI
- deps: bump golang.org/x/crypto from 0.53.0 to 0.55.0
- ci: bump actions/setup-go from 6 to 7
- ci: bump actions/checkout from 6 to 7
Verifying this release
```
shasum -a 256 -c touchid-agent-VERSION-darwin-universal.tar.gz.sha256
```
The binary is signed with a Developer ID certificate and notarized by Apple.
Gatekeeper validates the notarization ticket online on first launch (flat
Mach-O CLI binaries cannot be stapled).
Installing
```
tar -xzf touchid-agent-VERSION-darwin-universal.tar.gz
sudo install -m 755 touchid-agent /usr/local/bin/
```
See README.md for SSH config and launchd setup.