carvel-dev/kbld v0.49.2 on GitHub

Installation and signature verification

Installation

By downloading binary from the release

For instance, if you are using Linux on an AMD64 architecture:

# Download the binary
curl -LO https://github.com/carvel-dev/kbld/releases/download/v0.49.2/kbld-linux-amd64

# Move the binary in to your PATH
mv kapp-linux-amd64 /usr/local/bin/kbld

# Make the binary executable
chmod +x /usr/local/bin/kbld

Via Homebrew (macOS or Linux)

$ brew tap carvel-dev/carvel
$ brew install kbld
$ kbld version

Verify checksums file signature

The checksums file provided within the artifacts attached to this release is signed using Cosign with GitHub OIDC(Refer this page for cosign installation). To validate the signature of this file, run the following commands:

# Download the checksums file, certificate and signature
curl -LO https://github.com/carvel-dev/kbld/releases/download/v0.49.2/checksums.txt
curl -LO https://github.com/carvel-dev/kbld/releases/download/v0.49.2/checksums.txt.pem
curl -LO https://github.com/carvel-dev/kbld/releases/download/v0.49.2/checksums.txt.sig

# Verify the checksums file
cosign verify-blob checksums.txt \
  --certificate checksums.txt.pem \
  --signature checksums.txt.sig \
  --certificate-identity-regexp=https://github.com/carvel-dev \
  --certificate-oidc-issuer=https://token.actions.githubusercontent.com

Verify binary integrity

To verify the integrity of the downloaded binary, you can utilize the checksums file after having validated its signature.

# Verify the binary using the checksums file
sha256sum -c checksums.txt --ignore-missing

What's Changed

Replace SHA1 usage with SHA256 for enhanced security by @nikhilsagotiya in #598
Bump golang.org/x/net from 0.53.0 to 0.55.0 by @dependabot[bot] in #599
Fix registry hostname case sensitivity, CI runtime pin, and error-message formatting by @sameerforge in #602

New Contributors

@nikhilsagotiya made their first contribution in #598

Full Changelog: v0.49.1...v0.49.2

📂 Files Checksum

89c19adefa4c15799fb4d036dc747c7737091190df28ef277398037fbe8947f0  ./kbld-linux-arm64
7b4d564086cd66b83d2389e285a672f7390445244b0bacb0bbb023c795e883c1  ./kbld-darwin-amd64
ee82e4b6bbc69e2638ec5294e9ce5c286240c851216e3ace38379e630be304f4  ./kbld-windows-arm64.exe
b4984a18ce748f2f8ba39403ca0fcecd79d2e1086ba494ebe8fca1e24972522d ./kbld-windows-amd64.exe
8715db7932129a279b25060a9b90cc0eb9221d111d9924af996d6ed82de5b391  ./kbld-linux-amd64
6c51db7c284d20baa78ac7f616dbbe2794b934659972618a3887bb5e234ad03e  ./kbld-darwin-arm64