From 6636eeb749d2b9792a6de00e78a9b8c430fca8b3 Mon Sep 17 00:00:00 2001 From: mendhak Date: Thu, 7 Nov 2024 08:40:48 +0000 Subject: [PATCH] Instructions for verification to include cosign --- README.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/README.md b/README.md index 178fbce70..3732add5b 100644 --- a/README.md +++ b/README.md @@ -36,7 +36,7 @@ To verify the PGP integrity and signature: ```bash gpg --recv-key 6989CF77490369CFFDCBCD8995E7D75C76CBE9A9 -gpg --verify ~/Downloads/gpslogger-132.apk.asc +gpg --verify gpslogger-132.apk.asc ``` (Experimental) To verify with [Sigstore Cosign](https://docs.sigstore.dev/cosign/system_config/installation), the command should be in the releases notes, it will look like this: @@ -52,7 +52,7 @@ cosign verify-blob gpslogger-132.apk \ To verify the checksum: ```bash -sha256sum -c ~/Downloads/gpslogger-132.apk.SHA256 +sha256sum -c gpslogger-132.apk.SHA256 ```