Autocert v0.20.5 (26-03-19)
Signatures and Checksums
autocert uses sigstore/cosign for signing and verifying release artifacts.
Below is an example using cosign to verify a release artifact:
cosign verify-blob \
--bundle ~/Downloads/autocert_linux_0.20.5_amd64.tar.gz.sigstore.json \
--certificate-identity-regexp "https://github\.com/smallstep/workflows/.*" \
--certificate-oidc-issuer https://token.actions.githubusercontent.com \
~/Downloads/autocert_linux0.20.5_amd64.tar.gz
The checksums.txt file (in the 'Assets' section below) contains a checksum for every artifact in the release.
Changelog
- 27724ef Merge pull request #437 from smallstep/max/certificates-v0.30.1
- b0ac901 Update certificates to v0.30.1
- 857c451 Merge pull request #436 from smallstep/max/fix-release-ci-permissions
Thanks!
Those were the changes on v0.20.5!
Come join us on Discord to ask questions, chat about PKI, or get a sneak peak at the freshest PKI memes.