Immutable
release. Only release title and notes can be modified.
IronCrew v3.0.0
Installation
# macOS (Apple Silicon)
tar xzf ironcrew-macos-arm64.tar.gz
# macOS (Intel)
tar xzf ironcrew-macos-amd64.tar.gz
# Linux (x86_64)
tar xzf ironcrew-linux-amd64.tar.gz
# Linux (ARM64)
tar xzf ironcrew-linux-arm64.tar.gz
# Move to PATH
chmod +x ironcrew
sudo mv ironcrew /usr/local/bin/Verifying signatures
Each archive is signed with cosign via keyless GitHub OIDC:
cosign verify-blob \
--bundle ironcrew-linux-amd64.tar.gz.bundle \
--certificate-identity 'https://github.com/skitsanos/ironcrew/.github/workflows/release.yml@refs/heads/main' \
--certificate-oidc-issuer https://token.actions.githubusercontent.com \
ironcrew-linux-amd64.tar.gzThe release also includes a signed, multi-platform OCI archive and a strict receipt.
Registry publication promotes that exact archive; it does not rebuild historical source.
The SBOM is at ironcrew-v3.0.0-sbom.cdx.json (CycloneDX 1.x).