carvel-dev/kbld v0.47.1 on GitHub

Installation and signature verification

Installation

By downloading binary from the release

For instance, if you are using Linux on an AMD64 architecture:

# Download the binary
curl -LO https://github.com/carvel-dev/kbld/releases/download/v0.47.1/kbld-linux-amd64

# Move the binary in to your PATH
mv kapp-linux-amd64 /usr/local/bin/kbld

# Make the binary executable
chmod +x /usr/local/bin/kbld

Via Homebrew (macOS or Linux)

$ brew tap carvel-dev/carvel
$ brew install kbld
$ kbld version

Verify checksums file signature

The checksums file provided within the artifacts attached to this release is signed using Cosign with GitHub OIDC(Refer this page for cosign installation). To validate the signature of this file, run the following commands:

# Download the checksums file, certificate and signature
curl -LO https://github.com/carvel-dev/kbld/releases/download/v0.47.1/checksums.txt
curl -LO https://github.com/carvel-dev/kbld/releases/download/v0.47.1/checksums.txt.pem
curl -LO https://github.com/carvel-dev/kbld/releases/download/v0.47.1/checksums.txt.sig

# Verify the checksums file
cosign verify-blob checksums.txt \
  --certificate checksums.txt.pem \
  --signature checksums.txt.sig \
  --certificate-identity-regexp=https://github.com/carvel-dev \
  --certificate-oidc-issuer=https://token.actions.githubusercontent.com

Verify binary integrity

To verify the integrity of the downloaded binary, you can utilize the checksums file after having validated its signature.

# Verify the binary using the checksums file
sha256sum -c checksums.txt --ignore-missing

What's Changed

Bump golang 1.25.6 to fix CVEs by @CodesbyUnnati in #579

Full Changelog: v0.47.0...v0.47.1

📂 Files Checksum

0950151615895b6a699085ba216a321aec35e4808672277281b94fc58cc0686b  ./kbld-linux-amd64
136d66d0e2ea52ce90ed1c8609493b74df2be2fe240a151730d9dfb933b563af  ./kbld-windows-arm64.exe
4b649e508d8f5a0d29b15bacf4b70dd43055c284a122fa089524d216c85e9e62  ./kbld-linux-arm64
826d0f290c5fe2deb041840c506db75126b526ab7c76d38ed3c200300761be1e  ./kbld-darwin-arm64
d9663874178bd16b1bb65606dfeac482768cd0b6977008aa0a7a0743a65287a5  ./kbld-windows-amd64.exe
ed2ebfdd86ca3972c4966dca73e731b21571a7d9a35dd68cc7bfd9149c946b9c  ./kbld-darwin-amd64