v0.1.0
Signed release
Every binary attached below is reproducibly built (cargo build --release --locked, SOURCE_DATE_EPOCH pinned), cosign-signed (keyless, Sigstore),
and anchored in the public Rekor transparency log. An SPDX SBOM is attached
per target.
Install (Homebrew)
brew install cosmon/tap/cosmon
cs --versionVerify the binary you installed
cosign verify-blob \
--certificate-identity-regexp 'https://github.com/.*/cosmon/.github/workflows/release.yml@.*' \
--certificate-oidc-issuer https://token.actions.githubusercontent.com \
--signature cosmon-<version>-<target>.sig \
--certificate cosmon-<version>-<target>.pem \
"$(which cs)"
# exits 0 on a green signatureFull operator instructions:
docs/guides/release-verification.md.
Full Changelog: https://github.com/noogram/cosmon/commits/v0.1.0