From a6ba4f02456708ca611a67a90b1e72119604f7d5 Mon Sep 17 00:00:00 2001 From: chen21019 Date: Sat, 12 Sep 2026 15:17:25 +0800 Subject: [PATCH] docs: align build example with v1.0.11 release --- README.md | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/README.md b/README.md index cd9be81..1344c39 100644 --- a/README.md +++ b/README.md @@ -47,17 +47,17 @@ Build on Linux: Package the primary artifact and compatibility alias: ```sh -VERSION_OVERRIDE=v1.0.10 SOURCE_DATE_EPOCH=0 ARCH=amd64 ./scripts/package +VERSION_OVERRIDE=v1.0.11 SOURCE_DATE_EPOCH=0 ARCH=amd64 ./scripts/package ``` -The `release.yml` workflow checks the next `v1.0.11` raw Linux amd64 binary on +The `release.yml` workflow checks the `v1.0.11` raw Linux amd64 binary on pull requests and `main`: Go 1.27.0 build identity, race tests, vet, source and binary vulnerability/secret scans, a CycloneDX SBOM, and SHA-256 checksums. It publishes nothing automatically. A maintainer may dispatch it from `main` after the checks pass; the workflow then creates an annotated numeric tag and attaches the verified raw binary, archive, SBOM, scan evidence, and checksums -to the GitHub Release. The v1.0.10 command above remains the currently -published package example until that release completes. +to the GitHub Release. The published `v1.0.11` release includes the raw binary +and `SHA256SUMS`; verify the downloaded file before deploying it. ## Unprivileged Tests