Skip to content

v0.1.6

Latest
Compare
Choose a tag to compare
@github-actions github-actions released this 03 Apr 05:09
· 34 commits to main since this release
v0.1.6
887dc08

What's Changed

New Contributors

Full Changelog: v0.1.4...v0.1.6


The Charm logo

Thoughts? Questions? We love hearing from you. Feel free to reach out on Twitter, The Fediverse, or on Discord.

Verifying the artifacts

First, download the checksums.txt file, for example, with wget:

wget 'https://github.com/charmbracelet/freeze/releases/download/v0.1.6/checksums.txt'

Then, verify it using cosign:

cosign verify-blob \
  --certificate-identity 'https://github.com/charmbracelet/meta/.github/workflows/goreleaser.yml@refs/heads/main' \
  --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' \
  --cert 'https://github.com/charmbracelet/freeze/releases/download/v0.1.6/checksums.txt.pem' \
  --signature 'https://github.com/charmbracelet/freeze/releases/download/v0.1.6/checksums.txt.sig' \
  ./checksums.txt

If the output is Verified OK, you can safely use it to verify the checksums of other artifacts you downloaded from the release using sha256sum:

sha256sum --ignore-missing -c checksums.txt

Done! You artifacts are now verified!