rskey
is a command-line tool (and bundled Go packages) that generates secret keys interoperable with the format used by RStudio's Workbench, Connect, and Package Manager products.
Changes since v0.5.2
No changes
Binary signatures
Binary releases are signed with Sigstore. You can verify these signatures with their cosign
tool, for example:
$ COSIGN_EXPERIMENTAL=1 cosign verify-blob \
--signature rskey_0.5.3_linux_amd64.tar.gz.sig \
rskey_0.5.3_linux_amd64.tar.gz
We use Cosign's "keyless" mode, which uses the OpenID Connect tokens issued by GitHub for this repository and ephemeral certificates instead of private keys. This feature currently requires setting COSIGN_EXPERIMENTAL=1
.