From f679d963ff88d944504b2d6b4c02a2951cd514c5 Mon Sep 17 00:00:00 2001 From: Nicolai Ehrhardt <245527909+predictor2718@users.noreply.github.com> Date: Sun, 25 Oct 2026 17:16:06 +0100 Subject: [PATCH] feat: binary download card on the home page (#5) --- main_test.go | 1 + templates/home.html | 9 ++++++++- 2 files changed, 9 insertions(+), 1 deletion(-) diff --git a/main_test.go b/main_test.go index 11eba92..fdf34e5 100644 --- a/main_test.go +++ b/main_test.go @@ -84,6 +84,7 @@ func TestBuild_HomeOverviewOWASP(t *testing.T) { "cfgaudit/cfgaudit@v1.18.1", "ghcr.io/cfgaudit/cfgaudit:1.18.1", "/plugin install cfgaudit@cfgaudit", + "releases/download/v1.18.1/cfgaudit_1.18.1_linux_amd64.tar.gz", } { if !strings.Contains(home, want) { t.Errorf("home lacks %s", want) diff --git a/templates/home.html b/templates/home.html index 13f9911..ccef101 100644 --- a/templates/home.html +++ b/templates/home.html @@ -48,7 +48,14 @@
Binaries for Linux, macOS and Windows on the release page, with SLSA provenance; the image is signed with cosign.
+The container image is signed with cosign and carries SLSA provenance.
+ +curl -sSLO \
+ https://github.com/cfgaudit/cfgaudit/releases/download/v{{.Version}}/cfgaudit_{{.Version}}_linux_amd64.tar.gz
+tar xzf cfgaudit_{{.Version}}_linux_amd64.tar.gz
+ Archives for Linux, macOS and Windows on amd64 and arm64 on the release page, with checksums.txt and SLSA provenance. Check a download with gh attestation verify as shown in Verifying a release.