mohammad junayd
a91b390b44
fix(install): delay PATH cleanup until after verified install
...
Do not remove pipx or other strix copies before checksum and
provenance succeed, so a failed verify cannot leave the user
with no working binary (#1267 ).
2026-09-14 18:09:49 +04:00
mohammad junayd
dbb0a58466
style(tests): apply ruff format to install script tests
2026-09-14 17:57:46 +04:00
mohammad junayd
a079b6c418
test(install): cover checksum and provenance verification
...
Pin fail-closed installer paths for missing manifests, verifier
fallback, and the skip-verify escape hatch (#1267 ).
2026-09-14 17:47:03 +04:00
mohammad junayd
0636584eef
fix(install): leave existing Strix untouched on verify failure
...
Stage into *.new and only rename after checks pass; abort cleans
temps and keeps the current binary (#1267 ).
2026-09-14 17:38:33 +04:00
mohammad junayd
14b0aee28b
fix(install): verify SHA256SUMS before extract
...
Fail closed when the published checksum is missing or does not
match the downloaded archive (#1267 ).
2026-09-14 17:35:05 +04:00
mohammad junayd
d61e0a2a63
fix(install): verify Sigstore provenance before extract
...
Fail closed unless gh or cosign can check the published bundle
against this release workflow (#1267 ).
2026-09-14 17:31:52 +04:00
Matthew Bright
427cdcd9d4
Add Linux ARM64 standalone release support ( #886 )
2026-07-26 16:27:02 -07:00
