# Download and verify checksum
curl -LO https://artifacts.patterneddesigns.ca/PatternedDesigns/v1.2.0/patterneddesigns-v1.2.0-artifact1.tar.gz
echo "19f866d26dc9ad4a46777264e6a4be650f58bf9a8e5d6ff59aef2c440abe8e29 patterneddesigns-v1.2.0-artifact1.tar.gz" | sha256sum -cContent-addressed checksums for verifying artifact integrity.
19f866d26dc9ad4a46777264e6a4be650f58bf9a8e5d6ff59aef2c440abe8e29# Download artifact
curl -O https://artifacts.patterneddesigns.ca/PatternedDesigns/v1.2.0/patterneddesigns-v1.2.0-artifact1.tar.gz
# Verify SHA-256
sha256sum patterneddesigns-v1.2.0-artifact1.tar.gz
# Expected: 19f866d26dc9ad4a46777264e6a4be650f58bf9a8e5d6ff59aef2c440abe8e29Cryptographic signatures binding this artifact to publisher identities.
4096R/ABCD12341234 5678 90AB CDEF 1234 5678 90AB CDEF 1234 5678-----BEGIN PGP SIGNATURE-----
iQIzBAABCAAdFiEEexampleSignatureForPatternedDesignsv1.2.0Artifact1
-----END PGP SIGNATURE-----
# Import key
gpg --keyserver keys.openpgp.org --recv-keys 4096R/ABCD1234
# Verify signature
gpg --verify signature.asc artifact.tar.gzBuild metadata and supply chain context for this artifact.