carvel-dev/kbld v0.48.0 on GitHub

Installation and signature verification

Installation

By downloading binary from the release

For instance, if you are using Linux on an AMD64 architecture:

# Download the binary
curl -LO https://github.com/carvel-dev/kbld/releases/download/v0.48.0/kbld-linux-amd64

# Move the binary in to your PATH
mv kapp-linux-amd64 /usr/local/bin/kbld

# Make the binary executable
chmod +x /usr/local/bin/kbld

Via Homebrew (macOS or Linux)

$ brew tap carvel-dev/carvel
$ brew install kbld
$ kbld version

Verify checksums file signature

The checksums file provided within the artifacts attached to this release is signed using Cosign with GitHub OIDC(Refer this page for cosign installation). To validate the signature of this file, run the following commands:

# Download the checksums file, certificate and signature
curl -LO https://github.com/carvel-dev/kbld/releases/download/v0.48.0/checksums.txt
curl -LO https://github.com/carvel-dev/kbld/releases/download/v0.48.0/checksums.txt.pem
curl -LO https://github.com/carvel-dev/kbld/releases/download/v0.48.0/checksums.txt.sig

# Verify the checksums file
cosign verify-blob checksums.txt \
  --certificate checksums.txt.pem \
  --signature checksums.txt.sig \
  --certificate-identity-regexp=https://github.com/carvel-dev \
  --certificate-oidc-issuer=https://token.actions.githubusercontent.com

Verify binary integrity

To verify the integrity of the downloaded binary, you can utilize the checksums file after having validated its signature.

# Verify the binary using the checksums file
sha256sum -c checksums.txt --ignore-missing

What's Changed

25d7e9b Update Dockerfile to consume ytt v0.55.0 & kapp v0.65.2
cd55f00 Update imgpkg to v0.48.0
cfa113a build(deps): update cobra to v1.10.2
dc480ed chore(deps): bump k8s.io/apimachinery to v0.36.0
f6e507f ci: upgrade golangci-lint to v2.12.2 & Go to 1.26

Full Changelog: v0.47.3...v0.48.0

📂 Files Checksum

a7393b5dab9782218d578e4779e8c1a011418f19601fb66dcf881a3fcfe93bcf  ./kbld-windows-arm64.exe
52521ed5eebdddc2e7c7dc04da775270677a450f958198d0c26b3cb011f58a29  ./kbld-linux-amd64
950ecd6562fe99df46dd34f7b32706ef2583a428fb4f1c7563f29bd97b5082f2  ./kbld-darwin-amd64
8f94aecad48df7ee99fa347eb24efad71ae0fb6ae3be03677a3c7d1ead359f1d  ./kbld-linux-arm64
7320a9e3c04b0dd32c56c14c6710b8c5fe7d65f320d01d832874f42e3c0a7bfe  ./kbld-windows-amd64.exe
2360e61e8a96215ec4d5b0ee7620b2942e17a157caadd086a540c57552ac6a48  ./kbld-darwin-arm64