The Sigsum team is happy to announce a new version of the Sigsum tools, v0.12.0. The source code for the release can be checked out using
git clone -b v0.12.0 https://git.glasklar.is/sigsum/core/sigsum-go.git
or installed using
go install sigsum.org/sigsum-go/cmd/...@v0.12.0
See the NEWS file https://git.glasklar.is/sigsum/core/sigsum-go/-/blob/v0.12.0/NEWS or the excerpt below for the changes since v0.11.2.
For further documentation and project information, see: https://www.sigsum.org/
/The Sigsum team
NEWS for Sigsum tools, v0.12.0
The main change in this release is support for named policies.
New features:
* Support for named policies. This means that the user can optionally specify a policy name (using the -P option or directly in submitter key file) instead of specifying a policy file.
* Support for builtin policies. In this version there are two builtin policies called "sigsum-test1-2025" and "sigsum-test2-2025".
* New tool "sigsum-policy" that can be used to list and show available named policies.
Documentation improvements:
* In doc/sigsum-proof.md, document the correct keyword "size", https://git.glasklar.is/sigsum/core/sigsum-go/-/issues/135, and clarify the description of how to compute the leaf hash.
Incompatible changes:
* Building now requires go version 1.23 or later.