v0.5.2
rskey
is a command-line tool (and bundled Go packages) that generates secret keys interoperable with the format used by Posit's Workbench, Connect, and Package Manager products.
Changes since v0.5.1
rskey --version
now reports the version (#26, @meatballhat)- Password input now has a confirmation prompt to reduce the threat of typos (#9, @colearendt)
Binary signatures
Binary releases are signed with Sigstore. You can verify these signatures with their cosign
tool, for example:
$ COSIGN_EXPERIMENTAL=1 cosign verify-blob \
--signature rskey_0.5.2_linux_amd64.tar.gz.sig \
rskey_0.5.2_linux_amd64.tar.gz
We use Cosign's "keyless" mode, which uses the OpenID Connect tokens issued by GitHub for this repository and ephemeral certificates instead of private keys. This feature currently requires setting COSIGN_EXPERIMENTAL=1
.