lukaszraczylo/kportal
1
0
Fork 0
mirror of https://github.com/lukaszraczylo/kportal.git synced 2026-07-08 06:35:10 +00:00
Code Issues Packages Projects Releases Wiki Activity

fixup! fixup! Add artifacts signing.

Browse Source
This commit is contained in:
Lukasz Raczylo
2025-12-15 00:16:16 +00:00
parent 9fd8f9b03b
commit 391bce366d
3 changed files with 9 additions and 14 deletions
Download Patch File Download Diff File Expand all files Collapse all files
README.md
+5 -5
View File
@@ -85,14 +85,14 @@ make build && make install
### Verifying Release Signatures
All release checksums are signed with [cosign](https://github.com/sigstore/cosign). To verify:
All release checksums are signed with [cosign](https://github.com/sigstore/cosign) using keyless signing. To verify:
```bash
# Download the checksum file and its signature
# Then verify with:
# Download the checksum file and its sigstore bundle from the release
cosign verify-blob \
--key https://raw.githubusercontent.com/lukaszraczylo/lukaszraczylo/main/cosign.pub \
--signature kportal-<version>-checksums.txt.sig \
--certificate-identity-regexp "https://github.com/lukaszraczylo/kportal/.*" \
--certificate-oidc-issuer "https://token.actions.githubusercontent.com" \
--bundle "kportal-<version>-checksums.txt.sigstore.json" \
kportal-<version>-checksums.txt
```