Repository navigation
v0.6.16
Windows installers and the Windows CLI are Authenticode-signed (SB-03), x64 and arm64: signed in
CI through Azure Artifact Signing with the PassionCode.ai Public Trust profile, each signature
checked Valid before the release is published. SmartScreen no longer meets an unknown publisher.
Nothing else changes from 0.6.15.
Verify
gpg --verify SHA256SUMS.asc SHA256SUMS # key 63B30DC324BD697487AA31944FAFB8AEC803B6A7
shasum -a 256 -c SHA256SUMS --ignore-missing
gh attestation verify <file> --owner passioncode-ai --signer-repo passioncode-ai/.githubThe organization's public key: https://github.com/passioncode-ai/.github/blob/main/release-signing/passioncode-release-signing.asc