Skip to content

v1.0.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 12 Nov 08:13
· 5 commits to main since this release
v1.0.0
ee54f5c

Verify before you run this

curl -fsSLO https://raw.githubusercontent.com/marixdev/mpn-mail/v1.0.0/scripts/verify.sh
bash verify.sh --tag v1.0.0 --attest lilmail_1.0.0_linux_amd64.zip

verify.sh fetches SHA256SUMS, looks up the exact entry for the
asset and compares digests. It exits non-zero, with a distinct
diagnostic, on a missing or malformed manifest, a missing entry, a
truncated download or a digest mismatch. There is no skip path and a
missing SHA256SUMS is never treated as "nothing to check".
--attest additionally checks the sigstore build provenance (needs
the gh CLI); without it, provenance is NOT checked and the script
says so rather than letting a pass imply more than it checked.

Full Changelog: https://github.com/marixdev/mpn-mail/commits/v1.0.0

Assets 9
Loading