Skip to content

Releases: sigstore/root-signing

v0.0.3

19 Mar 22:44
@github-actions github-actions
v0.0.3
This tag was signed with the committer’s verified signature.
haydentherapper Hayden B
SSH Key Fingerprint: 6/0oHTP4fxv/vPNr+1uBw4QqCd+1xm9QTOEUXtpKGvs Learn about vigilant mode.
597fb92
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Learn about vigilant mode.
Compare
Choose a tag to compare
v0.0.3 Latest
Latest

What's Changed

  • Support for the latest TUF specification
  • Updates to the verification client
  • Many dependabot updates

Full Changelog: v0.0.2-rc...v0.0.3

Assets 9
Loading

v0.0.2-rc

18 Jul 20:36
@haydentherapper haydentherapper
v0.0.2-rc
bcca31d
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Learn about vigilant mode.
Compare
Choose a tag to compare
v0.0.2-rc 
Support Unix timestamps for verify, sync preprod more (#882)

This will verify that the timestamp expires at a more precise time than
the day granularity. Also increase how often the GHA runs to sync
preprod so it happens closer to 1 day after metadata is generated.

Signed-off-by: Hayden Blauzvern <hblauzvern@google.com>
Assets 2
Loading

v0.0.1-rc

06 Mar 16:05
@asraa asraa
v0.0.1-rc
58d185d
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Learn about vigilant mode.
Compare
Choose a tag to compare
v0.0.1-rc Pre-release
Pre-release

v0.0.1-rc

Test release

Assets 2
Loading