From 060ca5740f848f27099555d36fc3e342cd6bed75 Mon Sep 17 00:00:00 2001 From: "B. Blechschmidt" Date: Sun, 23 Jun 2024 21:30:43 +0200 Subject: [PATCH] Format build provenance attestation section --- README.md | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/README.md b/README.md index 17659d9..777f22d 100644 --- a/README.md +++ b/README.md @@ -37,6 +37,9 @@ To build an XCFramework for macOS and iOS, run the following: Download the binary from [releases](https://github.com/blechschmidt/tun2proxy/releases) and put it in your `PATH`. +
+ Authenticity Verification + Since v0.2.23 [build provenance attestations](https://docs.github.com/en/actions/security-guides/using-artifact-attestations-to-establish-provenance-for-builds#verifying-artifact-attestations-with-the-github-cli) are supported. These allow you to ensure that the builds have been generated from the code on GitHub through the GitHub CI/CD pipeline. To verify the authenticity of the build files, you can use the [GitHub CLI](https://cli.github.com/): @@ -44,6 +47,8 @@ CI/CD pipeline. To verify the authenticity of the build files, you can use the [ gh attestation verify <*.zip file> --owner tun2proxy ``` +
+ ### Install from source If you have [rust](https://rustup.rs/) toolchain installed, this should work: