Install
lintnet is a single binary written in Go.
So you only need to install an executable file into $PATH
.
brew install lintnet/lintnet/lintnet
scoop bucket add lintnet https://github.com/lintnet/scoop-bucket
scoop install lintnet
aqua g -i lintnet/lintnet
- Download a prebuilt binary from GitHub Releases and install it into
$PATH
Verify downloaded assets from GitHub Releases
You can verify downloaded assets using some tools.
--
- GitHub CLI
lintnet >= v0.4.8
You can install GitHub CLI by aqua.
aqua g -i cli/cli
gh release download -R lintnet/lintnet v0.4.8 -p lintnet_darwin_arm64.tar.gz
gh attestation verify lintnet_darwin_arm64.tar.gz \
-R lintnet/lintnet \
--signer-workflow suzuki-shunsuke/go-release-workflow/.github/workflows/release.yaml
- slsa-verifier
You can install slsa-verifier by aqua.
aqua g -i slsa-framework/slsa-verifier
gh release download -R lintnet/lintnet v0.4.8 -p lintnet_darwin_arm64.tar.gz -p multiple.intoto.jsonl
slsa-verifier verify-artifact lintnet_darwin_arm64.tar.gz \
--provenance-path multiple.intoto.jsonl \
--source-uri github.com/lintnet/lintnet \
--source-tag v0.4.8
- Cosign
You can install Cosign by aqua.
aqua g -i sigstore/cosign
gh release download -R lintnet/lintnet v0.4.8
cosign verify-blob \
--signature lintnet_0.4.8_checksums.txt.sig \
--certificate lintnet_0.4.8_checksums.txt.pem \
--certificate-identity-regexp 'https://github\.com/suzuki-shunsuke/go-release-workflow/\.github/workflows/release\.yaml@.*' \
--certificate-oidc-issuer "https://token.actions.githubusercontent.com" \
lintnet_0.4.8_checksums.txt
After verifying the checksum, verify the artifact.
cat lintnet_0.4.8_checksums.txt | sha256sum -c --ignore-missing
- Go
go install github.com/lintnet/lintnet@latest
Shell completion
lintnet >= v0.4.7
lintnet supports shell completion for bash, zsh, and fish.
bash
source <(lintnet completion bash)
zsh
source <(lintnet completion zsh)
fish
lintnet completion fish > ~/.config/fish/completions/lintnet.fish