v0.1.5

Install

# Linux, one static binary (x86_64 or aarch64), checked before it is unpacked
url=https://github.com/mhmtskrc2/zygo/releases/download/v0.1.5
curl -fsSLO "$url/zygo-$(uname -m)-unknown-linux-musl.tar.gz"
curl -fsSL "$url/SHA256SUMS" | sha256sum -c --ignore-missing
tar xzf zygo-*-unknown-linux-musl.tar.gz && sudo install -m 0755 zygo-*/zygo /usr/local/bin/

# macOS: the shim, the Linux build the VM needs, and Lima
brew install mhmtskrc2/zygo/zygo

# from source
cargo install zygo-cli

Or the container image, for linux/amd64 and linux/arm64:

docker pull ghcr.io/mhmtskrc2/zygo:0.1.5

It needs no privileges and three specific things —
packaging/oci/README.md has them, and zygo doctor names any
that are missing. Signed with cosign, keyless:

cosign verify ghcr.io/mhmtskrc2/zygo:0.1.5 \
  --certificate-identity-regexp '^https://github\.com/.*/\.github/workflows/release\.yml@refs/tags/' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com

zygo doctor is the first thing to run anywhere: it attempts every
requirement on this host and prints the fix for anything missing.

Checksums are in SHA256SUMS, signed the same way; the SBOM
(CycloneDX) is zygo-0.1.5.cdx.json:

cosign verify-blob SHA256SUMS --bundle SHA256SUMS.sigstore.json \
  --certificate-identity-regexp '^https://github\.com/.*/\.github/workflows/release\.yml@refs/tags/' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com
sha256sum -c SHA256SUMS --ignore-missing

Full Changelog: v0.1.4...v0.1.5