Skip to content

v0.8.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 20 Apr 16:13
· 138 commits to main since this release
v0.8.0
923d215
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

🎉 wsc vv0.8.0 Release

📦 Native CLI Binaries

Platform Binary TPM2 Support
Linux x86_64 wsc-linux-x86_64 ❌
Linux x86_64 wsc-linux-x86_64-tpm2 ✅
Linux aarch64 wsc-linux-aarch64 ❌
macOS x86_64 (Intel) wsc-macos-x86_64 ❌
macOS aarch64 (Apple Silicon) wsc-macos-aarch64 ❌
Windows x86_64 wsc-windows-x86_64.exe ❌

📦 WebAssembly Components

Component Library (WIT Interface):

  • wsc-component.wasm - WebAssembly component with WIT bindings
  • Signed OCI artifact: ghcr.io/pulseengine/wsc:v0.8.0

CLI Tool (WASI Binary):

  • wsc-cli.wasm - WASI command-line tool for Wasmtime
  • Signed OCI artifact: ghcr.io/pulseengine/wsc:v0.8.0-cli

🔐 Security Features

  • ✅ WASM Module Signing - Signed with wsc keyless signing (dogfooding!)
  • ✅ OCI Artifact Signing - Signed with Cosign using GitHub OIDC (keyless)
  • ✅ SLSA Provenance - Build attestation included
  • ✅ SHA256 Checksums - For download verification

Keyless Signing:

  • Identity: GitHub Actions OIDC
  • Certificate: Short-lived from Fulcio (Sigstore)
  • Transparency: Logged in Rekor

🚀 Quick Start

# Download native CLI for your platform
TAG=v0.8.0

# Linux x86_64
curl -LO https://github.com/pulseengine/sigil/releases/download/${TAG}/wsc-linux-x86_64
chmod +x wsc-linux-x86_64
./wsc-linux-x86_64 --version

# macOS Apple Silicon
curl -LO https://github.com/pulseengine/sigil/releases/download/${TAG}/wsc-macos-aarch64
chmod +x wsc-macos-aarch64
./wsc-macos-aarch64 --version

🔍 Verify Signatures

# Verify WASM module signature
wsc verify --keyless -i wsc-component.wasm

# Verify OCI artifact signature
cosign verify \
  --certificate-identity-regexp="https://github.com/pulseengine/sigil" \
  --certificate-oidc-issuer="https://token.actions.githubusercontent.com" \
  ghcr.io/pulseengine/wsc:${TAG}

📚 Documentation

See README.md for full documentation.

Assets 17
Loading