feat(cli): add Sigstore/SLSA provenance verification to Rust self-update (#7818)

Signed-off-by: fre$h <fre5h3nough@gmail.com> Signed-off-by: fre <anonwurcod@proton.me>
2026-03-19 17:54:36 +00:00
parent c97fbb9f3c
commit a68c6788eb
5 changed files with 1576 additions and 123 deletions
@@ -61,6 +61,8 @@ url = { workspace = true }
 urlencoding = { workspace = true }
 clap_complete = "4.5.62"
 comfy-table = "7.2.2"
+sha2 = "0.10"
+sigstore-verification = { version = "0.1", default-features = false, features = ["rustls"] }

 [target.'cfg(target_os = "windows")'.dependencies]
 winapi = { version = "0.3", features = ["wincred"] }