releases/README.md

Attesto releases

Versioned release pages for the Attesto platform. Every asset is copied from the canonical, KMS-signed download host https://get.attesto.eu and is covered by the attached *-SHA256SUMS manifest with its cosign signature (*-SHA256SUMS.sig, public key: https://get.attesto.eu/cosign.pub).

Verify any download:

cosign verify-blob --key https://get.attesto.eu/cosign.pub --insecure-ignore-tlog \
  --signature attesto-0.5.0-SHA256SUMS.sig attesto-0.5.0-SHA256SUMS
sha256sum -c --ignore-missing attesto-0.5.0-SHA256SUMS

Sources and packaging live in the private attesto-v1 repository (ops/get-host/); the Homebrew tap is https://git.attesto.eu/attesto/homebrew-attesto.