Repository navigation
agent-gm v1.2.0
agent-gm v1.2.0
Source commit: 209f370fc70a8dd8567fd2f54bfe2c7f7f3886a9
Container image
Deployments pin by digest, not by tag:
ghcr.io/thisnick/agent-gm@sha256:38009cec1c6e227c0074b4bc732fbe6a08520fc44dfeee4f4f0e5687a593a971
Tags v1.2.0, v1.2 and latest point at that digest today.
They are labels; the digest is the evidence.
Pins
| Dependency | Pin |
|---|---|
go.mau.fi/mautrix-gmessages (libgm) |
be48a58b733825f6dfd6bb630af5f236d3bc9ae8 |
github.com/modelcontextprotocol/go-sdk |
v1.7.0 |
Artefacts
checksums.txt is signed with cosign keyless over GitHub OIDC. Verify with:
cosign verify-blob checksums.txt \
--signature checksums.txt.sig \
--certificate checksums.txt.pem \
--certificate-identity-regexp 'https://github.com/thisnick/agent-gm/\.github/workflows/release\.yml@refs/tags/v.*' \
--certificate-oidc-issuer https://token.actions.githubusercontent.com
The npm wrapper @agent-gm/cli@1.2.0 downloads the agm archive for
your platform from this release and verifies it against a copy of
checksums.txt pinned inside the npm tarball.
Agent GM is AGPL-3.0-or-later. The corresponding source for these binaries is
this repository at 209f370fc70a8dd8567fd2f54bfe2c7f7f3886a9.