Helm security

Release signatures

Signing identity

User ID
Helm Release Signing <rudranpatel0980@gmail.com>
Algorithm
Ed25519
Fingerprint
ABC6 789F 5E8B 83F5 4DEB 741C F65A E51D 27C0 2E4B

Download the armored public key. The repository's annotated version tag and the published checksum manifest are signed by this key.

Verify

gpg --import helm-release.asc
git verify-tag v0.1.0
gpg --verify SHA256SUMS.asc SHA256SUMS
sha256sum --check SHA256SUMS

Always compare the imported key's full fingerprint with the value above before trusting a signature.