carvel-dev/kapp v0.66.2 on GitHub

Installation and signature verification

Installation

By downloading binary from the release

For instance, if you are using Linux on an AMD64 architecture:

# Download the binary
curl -LO https://github.com/carvel-dev/kapp/releases/download/v0.66.2/kapp-linux-amd64

# Move the binary in to your PATH
mv kapp-linux-amd64 /usr/local/bin/kapp

# Make the binary executable
chmod +x /usr/local/bin/kapp

Via Homebrew (macOS or Linux)

$ brew tap carvel-dev/carvel
$ brew install kapp
$ kapp version

Verify checksums file signature

The checksums file provided within the artifacts attached to this release is signed using Cosign with GitHub OIDC(Refer this page for cosign installation). To validate the signature of this file, run the following commands:

# Download the checksums file, certificate and signature
curl -LO https://github.com/carvel-dev/kapp/releases/download/v0.66.2/checksums.txt
curl -LO https://github.com/carvel-dev/kapp/releases/download/v0.66.2/checksums.txt.pem
curl -LO https://github.com/carvel-dev/kapp/releases/download/v0.66.2/checksums.txt.sig

# Verify the checksums file
cosign verify-blob checksums.txt \
  --certificate checksums.txt.pem \
  --signature checksums.txt.sig \
  --certificate-identity-regexp=https://github.com/carvel-dev \
  --certificate-oidc-issuer=https://token.actions.githubusercontent.com

Verify binary integrity

To verify the integrity of the downloaded binary, you can utilize the checksums file after having validated its signature.

# Verify the binary using the checksums file
sha256sum -c checksums.txt --ignore-missing

What's Changed

f54f534 Bump Go to 1.27.4 and update dependencies to fix CVEs
8558cf8 Bump carvel.dev/kapp-controller from 0.59.7 to 0.60.9
1716cc2 Document FORCE_COLOR in the kapp help
7106aa5 Merge pull request #1140 from carvel-dev/dependabot/go_modules/carvel.dev/kapp-controller-0.60.9
89c3a83 Merge pull request #1143 from himsngh/fix/729-noop-dependency-ordering
21455a9 Merge pull request #1145 from cvas22/docs/632-force-color
a68752f Merge pull request #1148 from praveenrewar/chore/bump-go-1.27.4
cbe96d5 Preserve dependency ordering for unchanged resources

📂 Files Checksum

e93b89fbd1a15495725119bb4a0fd70b98efaa206532f9c8398ad4ad7a05c8aa  ./kapp-darwin-amd64
80fedd817c6df60253ba73b1f3d15a87daba5d401113cd74b2332899036a5a93  ./kapp-darwin-arm64
48122dc249e48f8c92e2b3613fb4672950aaef2570248655fbede4c4d57b08a3  ./kapp-linux-amd64
3c2fc725afee527a0e38b4da55e41bdddf608d27a1ee830c29ba566132366fcb  ./kapp-linux-arm64
13e430858479a68bee76bae1edc1049431b2ef200f20a8917bd62173d0875608  ./kapp-windows-amd64.exe