Skip to content

Step Agent v0.5.0 (23-10-27)
Compare
Choose a tag to compare
@step-ci step-ci released this 27 Oct 16:05
v0.5.0
e82f0cb
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Learn about vigilant mode.

Official Release Artifacts

Linux

For more builds across platforms and architectures, see the Assets section below.

Signatures and Checksums

step-agent-plugin uses sigstore/cosign for signing and verifying release artifacts.

Below is an example using cosign to verify a release artifact:

cosign verify-blob \
  --certificate ~/Downloads/step-agent-plugin_linux_0.5.0_amd64.tar.gz.sig.pem \
  --signature ~/Downloads/step-agent-plugin_linux_0.5.0_amd64.tar.gz.sig \
  --certificate-identity-regexp "https://github\.com/smallstep/step-agent-plugin/.*" \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  ~/Downloads/step-agent-plugin_linux_0.5.0_amd64.tar.gz

The checksums.txt file (in the Assets section below) contains a checksum for every artifact in the release.

Assets 53
Loading