Verification
Verify the tarball against the published SHA256:
bb43e1f22e5c8e38de8b7ab10b676bea8103b090a10b4d5b27b593801d02d694 mumei-v0.11.2.tar.gz
Or via cosign (Sigstore keyless):
cosign verify-blob \
--bundle mumei-v0.11.2.tar.gz.cosign.bundle \
--certificate-identity-regexp '^https://github.com/iroha924/mumei/\.github/workflows/release-reusable\.yml@refs/tags/' \
--certificate-oidc-issuer https://token.actions.githubusercontent.com \
mumei-v0.11.2.tar.gz