mohammad junayd
|
a079b6c418
|
test(install): cover checksum and provenance verification
Pin fail-closed installer paths for missing manifests, verifier
fallback, and the skip-verify escape hatch (#1267).
|
2026-09-14 17:47:03 +04:00 |
|
mohammad junayd
|
0636584eef
|
fix(install): leave existing Strix untouched on verify failure
Stage into *.new and only rename after checks pass; abort cleans
temps and keeps the current binary (#1267).
|
2026-09-14 17:38:33 +04:00 |
|
mohammad junayd
|
14b0aee28b
|
fix(install): verify SHA256SUMS before extract
Fail closed when the published checksum is missing or does not
match the downloaded archive (#1267).
|
2026-09-14 17:35:05 +04:00 |
|
mohammad junayd
|
d61e0a2a63
|
fix(install): verify Sigstore provenance before extract
Fail closed unless gh or cosign can check the published bundle
against this release workflow (#1267).
|
2026-09-14 17:31:52 +04:00 |
|
Matthew Bright
|
427cdcd9d4
|
Add Linux ARM64 standalone release support (#886)
|
2026-07-26 16:27:02 -07:00 |
|