v0.5.1
rskey
is a command-line tool (and bundled Go packages) that generates secret keys interoperable with the format used by RStudio's Workbench, Connect, and Package Manager products.
Changes since v0.5.0
-
Windows releases now use
.zip
instead of.tar.gz
archives. -
Fewer transitive third-party dependencies are now included in the build.
Binary signatures
Binary releases are signed with Sigstore. You can verify these signatures with their cosign
tool, for example:
$ COSIGN_EXPERIMENTAL=1 cosign verify-blob \
--signature rskey_0.5.1_linux_amd64.tar.gz.sig \
rskey_0.5.1_linux_amd64.tar.gz
We use Cosign's "keyless" mode, which uses the OpenID Connect tokens issued by GitHub for this repository and ephemeral certificates instead of private keys. This feature currently requires setting COSIGN_EXPERIMENTAL=1
.