Linux
amd64
# Download the archive and the cosign generated signature
curl -LO https://github.com/jenkins-x/jx/releases/download/v0.0.1/jx-linux-amd64.tar.gz -LO https://github.com/jenkins-x/jx/releases/download/v0.0.1/jx-linux-amd64.tar.gz.sig
# Install cosign: https://docs.sigstore.dev/cosign/installation
# Verify using cosign
cosign verify-blob --key https://raw.githubusercontent.com/jenkins-x/jx/main/jx.pub --signature jx-linux-amd64.tar.gz.sig jx-linux-amd64.tar.gz
tar -zxvf jx-linux-amd64.tar.gz
sudo mv jx /usr/local/binarm
# Download the archive and the cosign generated signature
curl -LO https://github.com/jenkins-x/jx/releases/download/v0.0.1/jx-linux-arm.tar.gz -LO https://github.com/jenkins-x/jx/releases/download/v0.0.1/jx-linux-arm.tar.gz.sig
# Install cosign: https://docs.sigstore.dev/cosign/installation
# Verify using cosign
cosign verify-blob --key https://raw.githubusercontent.com/jenkins-x/jx/main/jx.pub --signature jx-linux-arm.tar.gz.sig jx-linux-arm.tar.gz
tar -zxvf jx-linux-arm.tar.gz
sudo mv jx /usr/local/binarm64
# Download the archive and the cosign generated signature
curl -LO https://github.com/jenkins-x/jx/releases/download/v0.0.1/jx-linux-arm64.tar.gz -LO https://github.com/jenkins-x/jx/releases/download/v0.0.1/jx-linux-arm64.tar.gz.sig
# Install cosign: https://docs.sigstore.dev/cosign/installation
# Verify using cosign
cosign verify-blob --key https://raw.githubusercontent.com/jenkins-x/jx/main/jx.pub --signature jx-linux-arm64.tar.gz.sig jx-linux-arm64.tar.gz
tar -zxvf jx-linux-arm64.tar.gz
sudo mv jx /usr/local/binmacOS
amd64
# Download the archive and the cosign generated signature
curl -LO https://github.com/jenkins-x/jx/releases/download/v0.0.1/jx-darwin-amd64.tar.gz -LO https://github.com/jenkins-x/jx/releases/download/v0.0.1/jx-darwin-amd64.tar.gz.sig
# Install cosign: https://docs.sigstore.dev/cosign/installation
# Verify using cosign
cosign verify-blob --key https://raw.githubusercontent.com/jenkins-x/jx/main/jx.pub --signature jx-darwin-amd64.tar.gz.sig jx-darwin-amd64.tar.gz
tar -zxvf jx-darwin-amd64.tar.gz
sudo mv jx /usr/local/binarm64
# Download the archive and the cosign generated signature
curl -LO https://github.com/jenkins-x/jx/releases/download/v0.0.1/jx-darwin-arm64.tar.gz -LO https://github.com/jenkins-x/jx/releases/download/v0.0.1/jx-darwin-arm64.tar.gz.sig
# Install cosign: https://docs.sigstore.dev/cosign/installation
# Verify using cosign
cosign verify-blob --key https://raw.githubusercontent.com/jenkins-x/jx/main/jx.pub --signature jx-darwin-arm64.tar.gz.sig jx-darwin-arm64.tar.gz
tar -zxvf jx-darwin-arm64.tar.gz
sudo mv jx /usr/local/binChanges
New Features
- sign image sbom with syft (ankitm123)
Bug Fixes
- remove sbom.json from cosign sign command (ankitm123)
- add version and cosign variables to sbom generation step (ankitm123)
Chores
- deps: upgrade jenkins-x-plugins/jx-gitops to version 0.11.0 (root)
- deps: bump anchore/sbom-action from 0.12.0 to 0.13.0 (dependabot[bot])