Skip to content

Commit

Permalink
Update GPG key in docs. Closes #182.
Browse files Browse the repository at this point in the history
  • Loading branch information
aj-stein-nist authored Aug 23, 2023
1 parent 6014c6d commit 11782ba
Showing 1 changed file with 7 additions and 6 deletions.
13 changes: 7 additions & 6 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -53,17 +53,18 @@ mkdir -p /opt/oscal-cli && cd /opt/oscal-cli
```
NOTE:

2. Download the zipped oscal-cli Java package. Download your preferred version, but we recommend [the latest stable release on the Maven Central repository](https://repo1.maven.org/maven2/gov/nist/secauto/oscal/tools/oscal-cli/cli-core/).
2. Download the zipped oscal-cli Java package. Download your preferred version, but we recommend [the latest stable release on the Maven Central repository](https://repo1.maven.org/maven2/gov/nist/secauto/oscal/tools/oscal-cli/cli-core/). You may also download [development snapshots](https://oss.sonatype.org/content/repositories/snapshots/gov/nist/secauto/oscal/tools/oscal-cli/) to evaluate new features or bug fixes merged into develop before they are finalized in a published release.

```
wget -q https://repo1.maven.org/maven2/gov/nist/secauto/oscal/tools/oscal-cli/cli-core/0.3.3/cli-core-0.3.3-oscal-cli.zip.asc # download the release signature
wget -q https://repo1.maven.org/maven2/gov/nist/secauto/oscal/tools/oscal-cli/cli-core/0.3.3/cli-core-0.3.3-oscal-cli.zip # download the release archive
gpg --keyserver hkps://pgp.mit.edu:443 --recv-keys 0xE5C8BE7A12463927FDB562F9CAC75F72946C412C # import or re-import the release signing key for oscal-cli
gpg --verify cli-core-0.3.3-oscal-cli.zip.asc # verify the signature for the release with signing key
wget -q https://repo1.maven.org/maven2/gov/nist/secauto/oscal/tools/oscal-cli/cli-core/1.0.1/cli-core-1.0.1-oscal-cli.zip.asc # download the release signature
wget -q https://repo1.maven.org/maven2/gov/nist/secauto/oscal/tools/oscal-cli/cli-core/1.0.1/cli-core-1.0.1-oscal-cli.zip # download the release archive
gpg --keyserver hkps://pgp.mit.edu:443 --recv-keys 6387E83B4828A504 # import or re-import the NIST OSCAL Release Engineering Key
gpg --verify cli-core-1.0.1-oscal-cli.zip.asc # verify the signature for the release with signing key
```

3. Extract oscal-cli into the directory.
```
unzip cli-core-0.3.3-oscal-cli.zip
unzip cli-core-1.0.1-oscal-cli.zip
```

4. (Recommended) Add oscal-cli's directory to your path.
Expand Down

0 comments on commit 11782ba

Please sign in to comment.