sign-manifest

Documentation

Overview

sign-manifest signs ox artifacts and updates the release-signatures.json file.

Usage:

# Sign artifacts and update .github/release-signatures.json
SAGEOX_CLI_SIGNING_KEY=<base64-private-key> go run ./scripts/sign-manifest

# Generate a new key pair
go run ./scripts/sign-manifest --generate-keys

# List registered artifacts
go run ./scripts/sign-manifest --list

The signatures file is checked into the repo and embedded at build time.