v0.8.2
🎉 wsc vv0.8.2 Release
📦 Native CLI Binaries
| Platform | Binary | TPM2 Support |
|---|---|---|
| Linux x86_64 | wsc-linux-x86_64 |
❌ |
| Linux x86_64 | wsc-linux-x86_64-tpm2 |
✅ |
| Linux aarch64 | wsc-linux-aarch64 |
❌ |
| macOS x86_64 (Intel) | wsc-macos-x86_64 |
❌ |
| macOS aarch64 (Apple Silicon) | wsc-macos-aarch64 |
❌ |
| Windows x86_64 | wsc-windows-x86_64.exe |
❌ |
📦 WebAssembly Components
Component Library (WIT Interface):
wsc-component.wasm- WebAssembly component with WIT bindings- Signed OCI artifact:
ghcr.io/pulseengine/wsc:v0.8.2
CLI Tool (WASI Binary):
wsc-cli.wasm- WASI command-line tool for Wasmtime- Signed OCI artifact:
ghcr.io/pulseengine/wsc:v0.8.2-cli
🔐 Security Features
- ✅ WASM Module Signing - Signed with wsc keyless signing (dogfooding!)
- ✅ OCI Artifact Signing - Signed with Cosign using GitHub OIDC (keyless)
- ✅ SLSA Provenance - Build attestation included
- ✅ SHA256 Checksums - For download verification
Keyless Signing:
- Identity: GitHub Actions OIDC
- Certificate: Short-lived from Fulcio (Sigstore)
- Transparency: Logged in Rekor
🚀 Quick Start
# Download native CLI for your platform
TAG=v0.8.2
# Linux x86_64
curl -LO https://github.com/pulseengine/sigil/releases/download/${TAG}/wsc-linux-x86_64
chmod +x wsc-linux-x86_64
./wsc-linux-x86_64 --version
# macOS Apple Silicon
curl -LO https://github.com/pulseengine/sigil/releases/download/${TAG}/wsc-macos-aarch64
chmod +x wsc-macos-aarch64
./wsc-macos-aarch64 --version🔍 Verify Signatures
# Verify WASM module signature
wsc verify --keyless -i wsc-component.wasm
# Verify OCI artifact signature
cosign verify \
--certificate-identity-regexp="https://github.com/pulseengine/sigil" \
--certificate-oidc-issuer="https://token.actions.githubusercontent.com" \
ghcr.io/pulseengine/wsc:${TAG}📚 Documentation
See README.md for full documentation.