Step CLI v0.28.5 (25-03-05)

Official Release Artifacts

Below are the most popular artifacts for step on each platform.

For packaged versions (Homebrew, Scoop, etc.), see our installation docs.

Linux

• 📦 step_linux_0.28.5_amd64.tar.gz
• 📦 step_linux_0.28.5_arm64.tar.gz
• 📦 step_linux_0.28.5_armv7.tar.gz
• 📦 step-cli_0.28.5-1_amd64.deb
• 📦 step-cli-0.28.5-1.x86_64.rpm
• 📦 step-cli_0.28.5-1_arm64.deb
• 📦 step-cli-0.28.5-1.aarch64.rpm
• see Assets below for more builds

macOS Darwin

• 📦 step_darwin_0.28.5_amd64.tar.gz
• 📦 step_darwin_0.28.5_arm64.tar.gz

Windows

• 📦 step_windows_0.28.5_amd64.zip
• 📦 step_windows_0.28.5_arm64.zip

Signatures and Checksums

step uses sigstore/cosign for signing and verifying release artifacts.

Below is an example using cosign to verify a release artifact:

cosign verify-blob \
  --certificate ~/Download/step_darwin_0.28.5_amd64.tar.gz.pem \
  --signature ~/Downloads/step_darwin_0.28.5_amd64.tar.gz.sig \
  --certificate-identity-regexp "https://github\.com/smallstep/workflows/.*" \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  ~/Downloads/step_darwin_0.28.5_amd64.tar.gz

The checksums.txt file (in the 'Assets' section below) contains a checksum for every artifact in the release.

Changelog

• 144d46a Merge pull request #1382 from smallstep/herman/crypto-v0.59.1
• 9006f26 Merge pull request #1383 from smallstep/herman/fix-token-user-braces
• 565dcf0 Change .Token.user.field to not use curly braces
• 015bf37 Upgrade go.step.sm/crypto to v0.59.1

Thanks!

Those were the changes on v0.28.5!

Come join us on Discord to ask questions, chat about PKI, or get a sneak peek at the freshest PKI memes.