Skip to content

v0.1.0

Choose a tag to compare

@eserie eserie released this 17 Jul 09:04
· 610 commits to main since this release
v0.1.0
adbc1f9

Signed release

Every binary attached below is reproducibly built (cargo build --release --locked, SOURCE_DATE_EPOCH pinned), cosign-signed (keyless, Sigstore),
and anchored in the public Rekor transparency log. An SPDX SBOM is attached
per target.

Install (Homebrew)

brew install cosmon/tap/cosmon
cs --version

Verify the binary you installed

cosign verify-blob \
  --certificate-identity-regexp 'https://github.com/.*/cosmon/.github/workflows/release.yml@.*' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  --signature  cosmon-<version>-<target>.sig \
  --certificate cosmon-<version>-<target>.pem \
  "$(which cs)"
# exits 0 on a green signature

Full operator instructions:
docs/guides/release-verification.md.


Full Changelog: https://github.com/noogram/cosmon/commits/v0.1.0