Changelog

Bug Fixes

• server: panic when checking signatures (8956c78)
• server: fix signatures ignored when too many git notes exists for a repo (6c50b6b)

Installation

Download trdl Vault plugin binaries from here:

• Linux amd64 (PGP signature)
• Linux arm64 (PGP signature)
• macOS amd64 (PGP signature)
• macOS arm64 (PGP signature)
• Windows amd64 (PGP signature)

These binaries were signed with PGP and could be verified with this PGP public key.

Download trdl client binaries from here:

• Linux amd64 (PGP signature)
• Linux arm64 (PGP signature)
• macOS amd64 (PGP signature)
• macOS arm64 (PGP signature)
• Windows amd64 (PGP signature)

These binaries were signed with PGP and could be verified with this PGP public key.

For example, trdl client binary can be downloaded, verified with gpg and then installed to ~/bin/ on Linux with these commands:

curl -sSLO "https://tuf.trdl.dev/targets/releases/0.4.2/linux-amd64/bin/trdl" -O "https://tuf.trdl.dev/targets/signatures/0.4.2/linux-amd64/bin/trdl.sig"
curl -sSL https://trdl.dev/trdl-client.asc | gpg --import
gpg --verify trdl.sig trdl
install -D trdl ~/bin/trdl