Skip to content

v0.5.1

Compare
Choose a tag to compare
@github-actions github-actions released this 07 Apr 17:50
· 9 commits to main since this release

rskey is a command-line tool (and bundled Go packages) that generates secret keys interoperable with the format used by RStudio's Workbench, Connect, and Package Manager products.

Changes since v0.5.0

  • Windows releases now use .zip instead of .tar.gz archives.

  • Fewer transitive third-party dependencies are now included in the build.

Binary signatures

Binary releases are signed with Sigstore. You can verify these signatures with their cosign tool, for example:

$ COSIGN_EXPERIMENTAL=1 cosign verify-blob \
  --signature rskey_0.5.1_linux_amd64.tar.gz.sig \
  rskey_0.5.1_linux_amd64.tar.gz

We use Cosign's "keyless" mode, which uses the OpenID Connect tokens issued by GitHub for this repository and ephemeral certificates instead of private keys. This feature currently requires setting COSIGN_EXPERIMENTAL=1.