Skip to content

Page: Verify a FosterStack Cache release yourself (every command run against 0.2.1) - #40

Closed
fosterstack-admin wants to merge 1 commit into
mainfrom
www/verify-a-release
Closed

fosterstack-admin wants to merge 1 commit into
mainfrom
www/verify-a-release

Conversation

@fosterstack-admin

Copy link
Copy Markdown
Contributor

Advisor request (Oct 9): the v0.2.1 'Verify a release yourself' page. Every command on the page was extracted from the HTML and run as printed against release 0.2.1 (13 commands, all exit 0); every printed output was diffed against the real output (all match; cosign's check summary goes to stderr, 'Verified OK' too). Platform shown: linux_arm64. SBOM output deliberately omits the creator/tool fields (internal tooling names). Found while verifying: the release manifest lists three image variants (production/debug/fips), not one; page says so. HOLD for owner cold-read. Base for the v0.3.0 evidence guide.

@cloudflare-workers-and-pages

cloudflare-workers-and-pages Bot commented Oct 9, 2026 •

Copy link
Copy Markdown

Deploying www with  Cloudflare Pages  Cloudflare Pages

Latest commit: 6648b9a
Status: ✅  Deploy successful!
Preview URL: https://f39ae4fe.www-4rw.pages.dev
Branch Preview URL: https://www-verify-a-release.www-4rw.pages.dev

View logs

@fosterstack-admin

Copy link
Copy Markdown
Contributor Author

folded into #48

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant