Skip to content

v0.8.2

Choose a tag to compare

@github-actions github-actions released this 11 May 19:19
· 121 commits to main since this release
57c5b71

🎉 wsc vv0.8.2 Release

📦 Native CLI Binaries

Platform Binary TPM2 Support
Linux x86_64 wsc-linux-x86_64
Linux x86_64 wsc-linux-x86_64-tpm2
Linux aarch64 wsc-linux-aarch64
macOS x86_64 (Intel) wsc-macos-x86_64
macOS aarch64 (Apple Silicon) wsc-macos-aarch64
Windows x86_64 wsc-windows-x86_64.exe

📦 WebAssembly Components

Component Library (WIT Interface):

  • wsc-component.wasm - WebAssembly component with WIT bindings
  • Signed OCI artifact: ghcr.io/pulseengine/wsc:v0.8.2

CLI Tool (WASI Binary):

  • wsc-cli.wasm - WASI command-line tool for Wasmtime
  • Signed OCI artifact: ghcr.io/pulseengine/wsc:v0.8.2-cli

🔐 Security Features

  • WASM Module Signing - Signed with wsc keyless signing (dogfooding!)
  • OCI Artifact Signing - Signed with Cosign using GitHub OIDC (keyless)
  • SLSA Provenance - Build attestation included
  • SHA256 Checksums - For download verification

Keyless Signing:

  • Identity: GitHub Actions OIDC
  • Certificate: Short-lived from Fulcio (Sigstore)
  • Transparency: Logged in Rekor

🚀 Quick Start

# Download native CLI for your platform
TAG=v0.8.2

# Linux x86_64
curl -LO https://github.com/pulseengine/sigil/releases/download/${TAG}/wsc-linux-x86_64
chmod +x wsc-linux-x86_64
./wsc-linux-x86_64 --version

# macOS Apple Silicon
curl -LO https://github.com/pulseengine/sigil/releases/download/${TAG}/wsc-macos-aarch64
chmod +x wsc-macos-aarch64
./wsc-macos-aarch64 --version

🔍 Verify Signatures

# Verify WASM module signature
wsc verify --keyless -i wsc-component.wasm

# Verify OCI artifact signature
cosign verify \
  --certificate-identity-regexp="https://github.com/pulseengine/sigil" \
  --certificate-oidc-issuer="https://token.actions.githubusercontent.com" \
  ghcr.io/pulseengine/wsc:${TAG}

📚 Documentation

See README.md for full documentation.