Commit graph

3 commits

Author SHA1 Message Date
mohammad junayd
14b0aee28b fix(install): verify SHA256SUMS before extract
Fail closed when the published checksum is missing or does not
match the downloaded archive (#1267).
2026-09-14 17:35:05 +04:00
mohammad junayd
d61e0a2a63 fix(install): verify Sigstore provenance before extract
Fail closed unless gh or cosign can check the published bundle
against this release workflow (#1267).
2026-09-14 17:31:52 +04:00
Matthew Bright
427cdcd9d4
Add Linux ARM64 standalone release support (#886) 2026-07-26 16:27:02 -07:00