Installation and signature verification
Installation
By downloading binary from the release
For instance, if you are using Linux on an AMD64 architecture:
# Download the binary
curl -LO https://github.com/carvel-dev/ytt/releases/download/v0.55.4/ytt-linux-amd64
# Move the binary in to your PATH
mv kapp-linux-amd64 /usr/local/bin/ytt
# Make the binary executable
chmod +x /usr/local/bin/yttVia Homebrew (macOS or Linux)
$ brew tap carvel-dev/carvel
$ brew install ytt
$ ytt version Verify checksums file signature
The checksums file provided within the artifacts attached to this release is signed using Cosign with GitHub OIDC(Refer this page for cosign installation). To validate the signature of this file, run the following commands:
# Download the checksums file, certificate and signature
curl -LO https://github.com/carvel-dev/ytt/releases/download/v0.55.4/checksums.txt
curl -LO https://github.com/carvel-dev/ytt/releases/download/v0.55.4/checksums.txt.pem
curl -LO https://github.com/carvel-dev/ytt/releases/download/v0.55.4/checksums.txt.sig
# Verify the checksums file
cosign verify-blob checksums.txt \
--certificate checksums.txt.pem \
--signature checksums.txt.sig \
--certificate-identity-regexp=https://github.com/carvel-dev \
--certificate-oidc-issuer=https://token.actions.githubusercontent.comVerify binary integrity
To verify the integrity of the downloaded binary, you can utilize the checksums file after having validated its signature.
# Verify the binary using the checksums file
sha256sum -c checksums.txt --ignore-missingWhat's Changed
- Report each builtin's own name when it errors by @MaxFreedomPollard in #1008
- Avoid computing debug template dump when debug is off by @emh-jump in #1012
- Resolve a walked directory to an absolute path once by @armallen in #1013
- Avoid printing the YAML AST when debug is off by @armallen in #996
- security: redact request path from error logs by @sameerforge in #1016
- security: sanitize HTTP request error to prevent query parameter leakage by @sameerforge in #1018
New Contributors
- @MaxFreedomPollard made their first contribution in #1008
- @armallen made their first contribution in #1013
Full Changelog: v0.55.3...v0.55.4
📂 Files Checksum
89c529789031cee20fac0802bb7bd083e11c78fcca618b5dc63dc395b35b5c09 ./ytt-windows-arm64.exe
468167c3784590d230121669ff093b14ff00e4e9e8a539ea835dd7b23d910918 ./ytt-windows-amd64.exe
a119d49a59b7dfed2d524c13fd7b96b3b92ec254b5fcc98224f1a139e325beca ./ytt-linux-riscv64
8b66e7f34fa6b3f3bfbc72ed9cff83c7300ab5d42f8e8b3dec7e70d9b1af8803 ./ytt-linux-arm64
214138d930f5865d561b62f3acba79207afb02c1d87814eb2a2693ea8a33fb9d ./ytt-linux-amd64
be901497fde4c646ee57b4081a06fa58e7d56b6bce33b697ec574dd2aaf49f47 ./ytt-darwin-arm64
93075698510350ce70d8d2708933fd19cc180e395d95a5d07a3f6e957d865c1e ./ytt-darwin-amd64