Official Release Artifacts
Below are the most popular artifacts for step
on each platform.
For packaged versions (Homebrew, Scoop, etc.), see our installation docs.
Linux
- 📦 step_linux_0.28.0_amd64.tar.gz
- 📦 step_linux_0.28.0_arm64.tar.gz
- 📦 step_linux_0.28.0_armv7.tar.gz
- 📦 step-cli_0.28.0-1_amd64.deb
- 📦 step-cli-0.28.0-1.x86_64.rpm
- 📦 step-cli_0.28.0-1_arm64.deb
- 📦 step-cli-0.28.0-1.aarch64.rpm
- see
Assets
below for more builds
macOS Darwin
Windows
Signatures and Checksums
step
uses sigstore/cosign for signing and verifying release artifacts.
Below is an example using cosign
to verify a release artifact:
cosign verify-blob \
--certificate ~/Download/step_darwin_0.28.0_amd64.tar.gz.pem \
--signature ~/Downloads/step_darwin_0.28.0_amd64.tar.gz.sig \
--certificate-identity-regexp "https://github\.com/smallstep/workflows/.*" \
--certificate-oidc-issuer https://token.actions.githubusercontent.com \
~/Downloads/step_darwin_0.28.0_amd64.tar.gz
The checksums.txt
file (in the 'Assets' section below) contains a checksum for every artifact in the release.
Changelog
- 874a879 Bump certificates to 0.28.0 (#1307)
- 5415196 Update changelog for v0.28.0 (#1306)
- e3a16d4 Remove
--bundle
fromstep ca certificate
usage text (#1302) - b226259 Merge pull request #1301 from smallstep/herman/fix-step-context-cli-utils
- ebeca4f Add disableSSHCAUser and disableSSHCAHost attributes to GCP provisioner (#1305)
- 4dfc345 Merge pull request #1304 from smallstep/dependabot/github_actions/actions/checkout-4.2.2
- 924009d Merge pull request #1303 from smallstep/dependabot/github_actions/actions/setup-go-5.1.0
- 4cba2d4 Bump actions/checkout from 4.2.1 to 4.2.2
- eaff111 Bump actions/setup-go from 5.0.2 to 5.1.0
- 8bd4d48 Fix
--context
being ignored in commands that rely oncertificates
- f619bce Merge pull request #1300 from stefaanderoeck/stefaan/android-v0.20.0
- 51bf14b OpenInBrowser on Android as well
Thanks!
Those were the changes on v0.28.0!
Come join us on Discord to ask questions, chat about PKI, or get a sneak peek at the freshest PKI memes.