Skip to content

Commit f81890f

Browse files
committed
Fix image signing with cosign
1 parent 1952052 commit f81890f

File tree

2 files changed

+20
-2
lines changed

2 files changed

+20
-2
lines changed

CHANGELOG.md

Lines changed: 9 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -18,11 +18,17 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
1818

1919
### Security
2020

21+
## [2.11.1] - 2025-04-20
22+
23+
### Fixed
24+
25+
- Images are now signed with `cosign`
26+
2127
## [2.11.0] - 2025-04-20
2228

2329
### Changed
2430

25-
- Artifacts and images are signed with `cosign`
31+
- Artifacts are now signed with `cosign`
2632

2733
## [2.10.0] - 2025-04-18
2834

@@ -201,7 +207,8 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
201207

202208
- Initial release of `semver`
203209

204-
[Unreleased]: https://github.com/ffurrer2/semver/compare/v2.11.0...HEAD
210+
[Unreleased]: https://github.com/ffurrer2/semver/compare/v2.11.1...HEAD
211+
[2.11.1]: https://github.com/ffurrer2/semver/compare/v2.11.0...v2.11.1
205212
[2.11.0]: https://github.com/ffurrer2/semver/compare/v2.10.0...v2.11.0
206213
[2.10.0]: https://github.com/ffurrer2/semver/compare/v2.9.1...v2.10.0
207214
[2.9.1]: https://github.com/ffurrer2/semver/compare/v2.9.0...v2.9.1

README.md

Lines changed: 11 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -31,6 +31,17 @@ scoop install semver
3131
go install github.com/ffurrer2/semver/v2/cmd/semver@latest
3232
```
3333

34+
### Verify signatures
35+
36+
```shell
37+
cosign verify-blob \
38+
--certificate=semver_2.11.0_darwin_amd64-keyless.pem \
39+
--signature=semver_2.11.0_darwin_amd64-keyless.sig \
40+
--certificate-oidc-issuer=https://token.actions.githubusercontent.com \
41+
--certificate-identity=https://github.com/ffurrer2/semver/.github/workflows/release.yml@refs/tags/v2.11.0 \
42+
semver_2.11.0_darwin_amd64.tar.gz
43+
```
44+
3445
## Usage
3546

3647
### help

0 commit comments

Comments
 (0)