Step SDS v0.2.2-rc10 (22-10-01)

Signatures and Checksums

step-sds uses sigstore/cosign for signing and verifying release artifacts.

Below is an example using cosign to verify a release artifact:

cosign verify-blob \
  -key https://raw.githubusercontent.com/smallstep/step-sds/master/cosign.pub \
  -signature ~/Downloads/step-sds_darwin_0.2.2-rc10_amd64.tar.gz.sig
  ~/Downloads/step-sds_darwin_0.2.2-rc10_amd64.tar.gz

The checksums.txt file (in the 'Assets' section below) contains a checksum for every artifact in the release.

Changelog

• 1826e47 Empty-Commit

Thanks!

Those were the changes on v0.2.2-rc10!

Come join us on Discord to ask questions, chat about PKI, or get a sneak peak at the freshest PKI memes.