Cleanup, signing and update of internals.

2026-07-08 04:34:35 +00:00 · 2025-12-15 00:32:53 +00:00
parent 2d9c28657b
commit 100251b896
19 changed files with 439 additions and 313 deletions
@@ -86,6 +86,19 @@ make build
 sudo ./build/lolcathost --install
 ```

+### Verifying Release Signatures
+
+All release checksums are signed with [cosign](https://github.com/sigstore/cosign) using keyless signing. To verify:
+
+```bash
+# Download the checksum file and its sigstore bundle from the release
+cosign verify-blob \
+  --certificate-identity-regexp "https://github.com/lukaszraczylo/lolcathost/.*" \
+  --certificate-oidc-issuer "https://token.actions.githubusercontent.com" \
+  --bundle "lolcathost-<version>-checksums.txt.sigstore.json" \
+  lolcathost-<version>-checksums.txt
+```
+
 ### Post-Installation

 The installer will: