Skip to content

v0.5.2

Compare
Choose a tag to compare
@github-actions github-actions released this 19 Mar 20:02
7ac5671

rskey is a command-line tool (and bundled Go packages) that generates secret keys interoperable with the format used by Posit's Workbench, Connect, and Package Manager products.

Changes since v0.5.1

  • rskey --version now reports the version (#26, @meatballhat)
  • Password input now has a confirmation prompt to reduce the threat of typos (#9, @colearendt)

Binary signatures

Binary releases are signed with Sigstore. You can verify these signatures with their cosign tool, for example:

$ COSIGN_EXPERIMENTAL=1 cosign verify-blob \
  --signature rskey_0.5.2_linux_amd64.tar.gz.sig \
  rskey_0.5.2_linux_amd64.tar.gz

We use Cosign's "keyless" mode, which uses the OpenID Connect tokens issued by GitHub for this repository and ephemeral certificates instead of private keys. This feature currently requires setting COSIGN_EXPERIMENTAL=1.