silo 0.2.0
Install
brew install org-quicko/tap/siloOr download the archive for your platform below and put silo on your PATH.
Verify
Check the archive against SHA256SUMS:
sha256sum --ignore-missing --check SHA256SUMSSHA256SUMS itself is signed. With cosign:
cosign verify-blob --bundle SHA256SUMS.cosign.bundle \
--certificate-identity-regexp '^https://github\.com/org-quicko/silo/\.github/workflows/release\.yml@' \
--certificate-oidc-issuer https://token.actions.githubusercontent.com \
SHA256SUMSOr, with the release GPG key, gpg --verify SHA256SUMS.asc SHA256SUMS.
Each archive also carries build provenance:
gh attestation verify silo-*.tar.gz --repo org-quicko/siloFull Changelog: v0.1.0...v0.2.0