Others
#1392 Sign a checksum file with Cosign
You can verify a checksum file with Cosign.
COSIGN_EXPERIMENTAL=1 cosign verify-blob \
--certificate-github-workflow-repository aquaproj/aqua \
--signature https://github.com/aquaproj/aqua/releases/download/v1.25.1-2/aqua_1.25.1-2_checksums.txt.sig \
--certificate https://github.com/aquaproj/aqua/releases/download/v1.25.1-2/aqua_1.25.1-2_checksums.txt.pem \
aqua_1.25.1-2_checksums.txt
tlog entry verified with uuid: 33982da0f5d508c17d56476887e48afaec506f059dc685d2e7ca16d0d1ab0de7 index: 8519705
Verified OK