mirrors/age
1
0
Fork 0
mirror of https://github.com/FiloSottile/age.git synced 2026-02-04 17:22:01 +00:00
Code Issues Packages Projects Releases Wiki Activity

SIGSUM.md: extend release playbook

Browse Source
This commit is contained in:
Filippo Valsorda
2026-02-02 17:31:01 +01:00
committed by GitHub
parent 10561a774f
commit 4a3a4ef00a
1 changed files with 4 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
SIGSUM.md
View File

@@ -29,13 +29,14 @@ Dear future me, to sign a new release and produce Sigsum proofs, run the followi
```
VERSION=v1.3.1
go install sigsum.org/sigsum-go/cmd/sigsum-verify@latest
go install github.com/tillitis/tkey-ssh-agent/cmd/tkey-ssh-agent@latest
go install github.com/tillitis/tkey-ssh-agent/cmd/tkey-ssh-agent@main
tkey-ssh-agent --agent-socket tkey-ssh-agent.sock --uss
passage -c other/tkey-ssh-sigsum-age
SSH_AUTH_SOCK=tkey-ssh-agent.sock ssh-add -L > tkey-ssh-agent.pub
passage other/sigsum-ratelimit > sigsum-ratelimit
gh release download $VERSION --dir artifacts/
gh release download $VERSION --repo FiloSottile/age --dir artifacts/
SSH_AUTH_SOCK=tkey-ssh-agent.sock sigsum-submit -k tkey-ssh-agent.pub -P sigsum-generic-2025-1 -a sigsum-ratelimit -d filippo.io artifacts/*
gh release upload $VERSION artifacts/*.proof
gh release upload $VERSION --repo FiloSottile/age artifacts/*.proof
```
In the future, we will move to reproducing the artifacts locally, and signing