orchestr8 Plugin Release v8.0.5

orchestr8 Plugin Release v8.0.5

Code Signing

This release includes cryptographic signatures to verify authenticity and prevent supply chain attacks.

Verification Instructions:

1. Download the plugin and signature files
2. Import the public key:

   gpg --import ORCHESTR8_PUBLIC_KEY.asc

3. Verify the signature:

   cd plugins/orchestr8
   ./scripts/verify-plugin.sh

Expected Key Fingerprint:

${KEY_FINGERPRINT}

Files Included

• CHECKSUMS.txt - SHA256 checksums of all plugin files
• CHECKSUMS.txt.asc - GPG signature of checksums
• ORCHESTR8_PUBLIC_KEY.asc - Public key for verification

Security

All files have been signed with the orchestr8 security key. Always verify signatures before using this plugin in production environments.

For more information, see CODE_SIGNING.md