v1.0.1

Auths Verify GitHub Action

Verify commit signatures and artifact attestations in your CI pipeline using Auths identity keys.

Usage

- uses: auths-dev/verify@v1
  with:
    token: '.auths/allowed_signers'

New: Artifact verification

- uses: auths-dev/verify@v1
  with:
    token: $\{{ secrets.AUTHS_CI_TOKEN }}
    files: 'dist/*.tar.gz'

See the README for full configuration options.

Full Changelog: v1.0.0...v1.0.1

v1.0.0

Auths Verify GitHub Action

Verify commit signatures and artifact attestations in your CI pipeline using Auths identity keys.

Usage

- uses: auths-dev/verify@v1
  with:
    token: '.auths/allowed_signers'

New: Artifact verification

- uses: auths-dev/verify@v1
  with:
    token: $\{{ secrets.AUTHS_CI_TOKEN }}
    files: 'dist/*.tar.gz'

See the README for full configuration options.

What's Changed

• feat: add cross-run binary caching to speed up repeated workflow runs by @bordumb in #1
• feat: add ci dogfooding by @bordumb in #2
• feat: add artifact verification inputs/outputs by @bordumb in #7
• build: release scripts by @bordumb in #9
• build: uncomment ci by @bordumb in #10
• refactor: rename to /verify by @bordumb in #11
• refactor: replace old 3-secret ci-setup with single AUTHS_CI_TOKEN across workflows, docs, justfiles, and templates by @bordumb in #12
• Dev action consistency by @bordumb in #13

New Contributors

• @bordumb made their first contribution in #1

Full Changelog: https://github.com/auths-dev/verify/commits/v1.0.0