search

docker-library / buildpack-deps

MIT License
445 stars 113 forks source link

Add "sq" as a "gpg" alternative #141

Closed tianon closed 1 year ago

tianon commented 1 year ago

(where new enough to include sq keyserver subcommands)

See https://sequoia-pgp.org/ and https://gitlab.com/sequoia-pgp/sequoia-sq

Basic example sq workflow:

$ sq keyserver --server hkps://keys.openpgp.org get --output key 'B42F6819007F00F88E364FD4036A9C25BF357DD4'
$ wget https://github.com/tianon/gosu/releases/download/1.16/gosu-amd64{,.asc}
$ sq verify --signer-cert key --detached gosu-amd64.asc gosu-amd64
Good signature from 036A9C25BF357DD4
1 good signature.