carvel-dev/kbld v0.49.1 on GitHub

Installation and signature verification

Installation

By downloading binary from the release

For instance, if you are using Linux on an AMD64 architecture:

# Download the binary
curl -LO https://github.com/carvel-dev/kbld/releases/download/v0.49.1/kbld-linux-amd64

# Move the binary in to your PATH
mv kapp-linux-amd64 /usr/local/bin/kbld

# Make the binary executable
chmod +x /usr/local/bin/kbld

Via Homebrew (macOS or Linux)

$ brew tap carvel-dev/carvel
$ brew install kbld
$ kbld version

Verify checksums file signature

The checksums file provided within the artifacts attached to this release is signed using Cosign with GitHub OIDC(Refer this page for cosign installation). To validate the signature of this file, run the following commands:

# Download the checksums file, certificate and signature
curl -LO https://github.com/carvel-dev/kbld/releases/download/v0.49.1/checksums.txt
curl -LO https://github.com/carvel-dev/kbld/releases/download/v0.49.1/checksums.txt.pem
curl -LO https://github.com/carvel-dev/kbld/releases/download/v0.49.1/checksums.txt.sig

# Verify the checksums file
cosign verify-blob checksums.txt \
  --certificate checksums.txt.pem \
  --signature checksums.txt.sig \
  --certificate-identity-regexp=https://github.com/carvel-dev \
  --certificate-oidc-issuer=https://token.actions.githubusercontent.com

Verify binary integrity

To verify the integrity of the downloaded binary, you can utilize the checksums file after having validated its signature.

# Verify the binary using the checksums file
sha256sum -c checksums.txt --ignore-missing

What's Changed

d633d6d Replace SHA1 usage with SHA256 for enhanced security

First Contribution

@nikhilsagotiya 🎆

Full Changelog: v0.49.0...v0.49.1

📂 Files Checksum

b3f5277ff4819de189d1ebd6e455b3390308ca43b122b5bb3c40a7bb9e6f30c4  ./kbld-linux-arm64
d6c6dd4af41bea5cb3c8914e9b43536fc3c606592ddaaa98dda08b8517400969  ./kbld-darwin-amd64
1543d1352e90105a6206ccbf86b673aaf8c0d5d3637d2dc6f1079fcdece403a9  ./kbld-windows-arm64.exe
02462103319ce9c472bb30501d59fa199dc52d3521158368c2c90a7109d8646b ./kbld-windows-amd64.exe
437d38d3e59d01dd0d1ad75b4eb67fbd04fe51ed3de1ed55c3f7b3b7d5ec7546  ./kbld-linux-amd64
8b7c93828b96065d7fcdb51989e59462af443f59c8a88beeb421c5f5ff0ef65e  ./kbld-darwin-arm64