Skip to content

Autocert v0.20.5-rc2 (26-03-19)

Pre-release
Pre-release

Choose a tag to compare

View all tags
@github-actions github-actions released this 19 Mar 04:47
· 19 commits to master since this release
v0.20.5-rc2
2c635ba
This commit was signed with the committer’s verified signature.
dopey Max
SSH Key Fingerprint: XqwT0oeU2w7K2xi256NPKLR78lp+Z9ZEastRNQDD49Q
Verified
Learn about vigilant mode.

Signatures and Checksums

autocert uses sigstore/cosign for signing and verifying release artifacts.

Below is an example using cosign to verify a release artifact:

cosign verify-blob \
  --bundle ~/Downloads/autocert_linux_0.20.5-rc2_amd64.tar.gz.sigstore.json \
  --certificate-identity-regexp "https://github\.com/smallstep/workflows/.*" \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  ~/Downloads/autocert_linux0.20.5-rc2_amd64.tar.gz

The checksums.txt file (in the 'Assets' section below) contains a checksum for every artifact in the release.

Changelog

  • 2c635ba Grant CI job required permissions in release workflow
  • 4942f88 Merge pull request #426 from smallstep/dependabot/go_modules/k8s.io/api-0.36.0-alpha.1
  • 31ab85a build(deps): bump k8s.io/api from 0.35.0-alpha.0 to 0.36.0-alpha.1
  • 9c02102 Merge pull request #435 from smallstep/dependabot/go_modules/google.golang.org/grpc-1.79.3
  • 422c0ca build(deps): bump google.golang.org/grpc from 1.79.1 to 1.79.3
  • cbe8729 Merge pull request #434 from smallstep/max/certificates-v0.30.0
  • 0b67c0e Fix lint warnings across controller and examples
  • d58f6a5 go mod tidy
  • e9aaadb Merge branch 'master' into max/certificates-v0.30.0
  • 4fdbed6 Merge pull request #424 from smallstep/dependabot/go_modules/github.com/slackhq/nebula-1.10.3
  • 4bf975a build(deps): bump github.com/slackhq/nebula from 1.9.7 to 1.10.3
  • 6d842cd Merge pull request #428 from smallstep/dependabot/go_modules/golang.org/x/net-0.50.0
  • 56c4c2c Merge pull request #429 from smallstep/dependabot/go_modules/filippo.io/edwards25519-1.1.1
  • 0388cbe ci: Enable zizmor GitHub Advanced Security upload (#432)
  • ba71de0 Merge pull request #433 from smallstep/dependabot/github_actions/softprops/action-gh-release-2.6.1
  • 9bf690b Update certificates to v0.30.0
  • 9204b3a build(deps): bump softprops/action-gh-release from 2.5.0 to 2.6.1
  • 8e53541 Add actionci.yml (#431)
  • 0fff58a Merge pull request #430 from smallstep/carl/cicd-security-hardening
  • 8e4f3c0 Add least-privilege permissions to triage workflow
  • 2af649b build(deps): bump golang.org/x/net from 0.49.0 to 0.50.0
  • 9b85295 Merge pull request #427 from smallstep/dependabot/go_modules/google.golang.org/grpc-1.79.1
  • 5a62e72 build(deps): bump filippo.io/edwards25519 from 1.1.0 to 1.1.1
  • 490348c build(deps): bump google.golang.org/grpc from 1.78.0 to 1.79.1
  • 0950fd1 Merge pull request #423 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.76.0
  • e505cbe build(deps): bump go.step.sm/crypto from 0.75.0 to 0.76.0
  • 86d0525 Merge pull request #422 from smallstep/mariano/cosign
  • 8aaaebe Update header with cosign instructions

Thanks!

Those were the changes on v0.20.5-rc2!

Come join us on Discord to ask questions, chat about PKI, or get a sneak peak at the freshest PKI memes.

Assets 8
Loading