Skip to content

Instantly share code, notes, and snippets.

@ianlewis
Created November 26, 2024 13:41
Show Gist options
  • Save ianlewis/a74f3df12b64c825c4d0d40e833bb469 to your computer and use it in GitHub Desktop.
Save ianlewis/a74f3df12b64c825c4d0d40e833bb469 to your computer and use it in GitHub Desktop.
Verify OpenTofu 1.8.6
base64 -d < tofu_1.8.6_linux_amd64.tar.gz.base64.pem > tofu_1.8.6_linux_amd64.tar.gz.base64.pem.decoded
cosign verify-blob tofu_1.8.6_linux_amd64.tar.gz \
--certificate-identity=https://github.com/opentofu/opentofu/.github/workflows/release.yml@refs/heads/v1.8 \
--certificate-oidc-issuer="https://token.actions.githubusercontent.com" \
--certificate tofu_1.8.6_linux_amd64.tar.gz.base64.pem.decoded \
--signature tofu_1.8.6_linux_amd64.tar.gz.sig
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment