|
1 | 1 | # omm |
2 | 2 |
|
3 | 3 | [](https://github.com/dhth/omm/releases/latest) |
4 | | - |
| 4 | +[][2] |
5 | 5 | [](https://github.com/dhth/omm/actions/workflows/build.yml) |
6 | 6 | [](https://github.com/dhth/omm/actions/workflows/vulncheck.yml) |
7 | 7 | [](https://github.com/dhth/omm/discussions) |
@@ -288,40 +288,45 @@ verify its authenticity. Checksums are applied to all released artifacts, and |
288 | 288 | the resulting checksum file is signed using |
289 | 289 | [cosign](https://docs.sigstore.dev/cosign/installation/). |
290 | 290 |
|
291 | | -Steps to verify (replace the version in the commands listed with the one you |
292 | | -want): |
| 291 | +Steps to verify (replace `A.B.C` in the commands listed below with the version |
| 292 | +you want): |
293 | 293 |
|
294 | 294 | 1. Download the following files from the release: |
295 | 295 |
|
296 | | - - omm_0.5.0_checksums.txt |
297 | | - - omm_0.5.0_checksums.txt.pem |
298 | | - - omm_0.5.0_checksums.txt.sig |
| 296 | + - omm_A.B.C_checksums.txt |
| 297 | + - omm_A.B.C_checksums.txt.pem |
| 298 | + - omm_A.B.C_checksums.txt.sig |
299 | 299 |
|
300 | 300 | 2. Verify the signature: |
301 | 301 |
|
302 | 302 | ```shell |
303 | | - cosign verify-blob omm_0.5.0_checksums.txt \ |
304 | | - --certificate omm_0.5.0_checksums.txt.pem \ |
305 | | - --signature omm_0.5.0_checksums.txt.sig \ |
| 303 | + cosign verify-blob omm_A.B.C_checksums.txt \ |
| 304 | + --certificate omm_A.B.C_checksums.txt.pem \ |
| 305 | + --signature omm_A.B.C_checksums.txt.sig \ |
306 | 306 | --certificate-identity-regexp 'https://github\.com/dhth/omm/\.github/workflows/.+' \ |
307 | 307 | --certificate-oidc-issuer "https://token.actions.githubusercontent.com" |
308 | 308 | ``` |
309 | 309 |
|
310 | 310 | 3. Download the compressed archive you want, and validate its checksum: |
311 | 311 |
|
312 | 312 | ```shell |
313 | | - curl -sSLO https://github.com/dhth/omm/releases/download/v0.5.0/omm_0.5.0_linux_amd64.tar.gz |
314 | | - sha256sum --ignore-missing -c omm_0.5.0_checksums.txt |
| 313 | + curl -sSLO https://github.com/dhth/omm/releases/download/vA.B.C/omm_A.B.C_linux_amd64.tar.gz |
| 314 | + sha256sum --ignore-missing -c omm_A.B.C_checksums.txt |
315 | 315 | ``` |
316 | 316 |
|
317 | 317 | 3. If checksum validation goes through, uncompress the archive: |
318 | 318 |
|
319 | 319 | ```shell |
320 | | - tar -xzf omm_0.5.0_linux_amd64.tar.gz |
| 320 | + tar -xzf omm_A.B.C_linux_amd64.tar.gz |
321 | 321 | ./omm |
322 | 322 | # profit! |
323 | 323 | ``` |
324 | 324 |
|
| 325 | +Repo Activity |
| 326 | +--- |
| 327 | + |
| 328 | + |
| 329 | + |
325 | 330 | Acknowledgements |
326 | 331 | --- |
327 | 332 |
|
|
0 commit comments