go/goreleaser
go/goreleaser
1
0
Fork 0
mirror of https://github.com/goreleaser/goreleaser.git synced 2025-01-22 04:08:49 +02:00
Code Issues Releases Activity

docs: simplify cosign

Browse Source 
Signed-off-by: Carlos Alexandro Becker <caarlos0@gmail.com>
This commit is contained in:
Carlos Alexandro Becker 2021-09-03 09:54:29 -03:00
parent 1e40bbacfa
commit 6c21e393f5
No known key found for this signature in database
GPG Key ID: E61E2F7DC14AB940
1 changed files with 6 additions and 22 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

28
www/docs/install.md
View File

@ -133,14 +133,10 @@ You can verify it using [our public key](https://goreleaser.com/static/gorelease
=== "OSS"
1. Download the files you want, the `checksums.txt` and `checksums.txt.sig` files from the [releases][releases] page.
1. Get our public key:
```sh
wget https://goreleaser.com/static/goreleaser.pub
```
1. Verify the signature:
```sh
cosign verify-blob \
-key goreleaser.pub \
-key https://goreleaser.com/static/goreleaser.pub \
-signature checksums.txt.sig \
checksums.txt
```
@ -151,14 +147,10 @@ You can verify it using [our public key](https://goreleaser.com/static/gorelease
=== "Pro"
1. Download the files you want, the `checksums.txt` and `checksums.txt.sig` files from the [releases][pro-releases] page.
1. Get our public key:
```sh
wget https://goreleaser.com/static/goreleaser.pub
```
1. Verify the signature:
```sh
cosign verify-blob \
-key goreleaser.pub \
-key https://goreleaser.com/static/goreleaser.pub \
-signature checksums.txt.sig \
checksums.txt
```
@ -174,32 +166,24 @@ Our Docker image is signed with [cosign][].
You can verify it using [our public key](https://goreleaser.com/static/goreleaser.pub).
=== "OSS"
1. Get our public key:
```sh
wget https://goreleaser.com/static/goreleaser.pub
```
1. Verify the signatures:
```sh
cosign verify \
-key goreleaser.pub \
-key https://goreleaser.com/static/goreleaser.pub \
goreleaser/goreleaser
cosign verify \
-key goreleaser.pub \
-key https://goreleaser.com/static/goreleaser.pub \
ghcr.io/goreleaser/goreleaser
```
=== "Pro"
1. Get our public key:
```sh
wget https://goreleaser.com/static/goreleaser.pub
```
1. Verify the signatures:
```sh
cosign verify \
-key goreleaser.pub \
-key https://goreleaser.com/static/goreleaser.pub \
goreleaser/goreleaser-pro
cosign verify \
-key goreleaser.pub \
-key https://goreleaser.com/static/goreleaser.pub \
ghcr.io/goreleaser/goreleaser-pro
```