Step CLI v0.28.5-rc1 (25-03-05)

Official Release Artifacts

Below are the most popular artifacts for step on each platform.

For packaged versions (Homebrew, Scoop, etc.), see our installation docs.

Linux

• 📦 step_linux_0.28.5-rc1_amd64.tar.gz
• 📦 step_linux_0.28.5-rc1_arm64.tar.gz
• 📦 step_linux_0.28.5-rc1_armv7.tar.gz
• 📦 step-cli_0.28.5.rc1-1_amd64.deb
• 📦 step-cli-0.28.5.rc1-1.x86_64.rpm
• 📦 step-cli_0.28.5.rc1-1_arm64.deb
• 📦 step-cli-0.28.5.rc1-1.aarch64.rpm
• see Assets below for more builds

macOS Darwin

• 📦 step_darwin_0.28.5-rc1_amd64.tar.gz
• 📦 step_darwin_0.28.5-rc1_arm64.tar.gz

Windows

• 📦 step_windows_0.28.5-rc1_amd64.zip
• 📦 step_windows_0.28.5-rc1_arm64.zip

Signatures and Checksums

step uses sigstore/cosign for signing and verifying release artifacts.

Below is an example using cosign to verify a release artifact:

cosign verify-blob \
  --certificate ~/Download/step_darwin_0.28.5-rc1_amd64.tar.gz.pem \
  --signature ~/Downloads/step_darwin_0.28.5-rc1_amd64.tar.gz.sig \
  --certificate-identity-regexp "https://github\.com/smallstep/workflows/.*" \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  ~/Downloads/step_darwin_0.28.5-rc1_amd64.tar.gz

The checksums.txt file (in the 'Assets' section below) contains a checksum for every artifact in the release.

Changelog

• 25e071b Bump go.step.cm/crypto to latest to see if it fixes releases

Thanks!

Those were the changes on v0.28.5-rc1!

Come join us on Discord to ask questions, chat about PKI, or get a sneak peek at the freshest PKI memes.