@@ -18,7 +18,7 @@ PM> Install-Package NetEscapades.AspNetCore.SecurityHeaders
18
18
Or using the ` dotnet ` CLI
19
19
20
20
``` bash
21
- dotnet add package NetEscapades.AspNetCore.SecurityHeaders --version 1.0 .0
21
+ dotnet add package NetEscapades.AspNetCore.SecurityHeaders --version 1.1 .0
22
22
```
23
23
24
24
## Usage
@@ -33,7 +33,7 @@ When you install the package, it should be added to your `.csproj`. Alternativel
33
33
</PropertyGroup >
34
34
35
35
<ItemGroup >
36
- <PackageReference Include =" NetEscapades.AspNetCore.SecurityHeaders" Version =" 1.0 .0" />
36
+ <PackageReference Include =" NetEscapades.AspNetCore.SecurityHeaders" Version =" 1.1 .0" />
37
37
</ItemGroup >
38
38
39
39
</Project >
@@ -567,8 +567,8 @@ This adds the package to your _.csproj_ file:
567
567
< / PropertyGroup >
568
568
569
569
< ItemGroup >
570
- < PackageReference Include = " NetEscapades.AspNetCore.SecurityHeaders" Version = " 1.0 .0" / >
571
- < PackageReference Include = " NetEscapades.AspNetCore.SecurityHeaders.TagHelpers" Version = " 1.0 .0" / >
570
+ < PackageReference Include = " NetEscapades.AspNetCore.SecurityHeaders" Version = " 1.1 .0" / >
571
+ < PackageReference Include = " NetEscapades.AspNetCore.SecurityHeaders.TagHelpers" Version = " 1.1 .0" / >
572
572
< / ItemGroup >
573
573
574
574
< / Project >
@@ -702,14 +702,14 @@ the provenance of the package and the associated SBOMs.
702
702
To remove the signature file on Linux or macOS , you can use the `zip ` utility :
703
703
704
704
```bash
705
- file = " path/to/NetEscapades.AspNetCore.SecurityHeaders.1.0 .0.nupkg"
705
+ file = " path/to/NetEscapades.AspNetCore.SecurityHeaders.1.1 .0.nupkg"
706
706
zip - d $file .signature .p7s
707
707
```
708
708
709
709
alternatively , use PowerShell and .NET to remove the `.signature .p7s ` file :
710
710
711
711
```powershell
712
- $file = " path/to/NetEscapades.AspNetCore.SecurityHeaders.1.0 .0.nupkg"
712
+ $file = " path/to/NetEscapades.AspNetCore.SecurityHeaders.1.1 .0.nupkg"
713
713
[Reflection .Assembly ]:: LoadWithPartialName ('System.IO.Compression' )
714
714
$stream = New - Object IO .FileStream ($file , [IO .FileMode ]:: Open )
715
715
$zip = New - Object IO .Compression .ZipArchive ($stream , [IO .Compression .ZipArchiveMode ]:: Update )
@@ -720,14 +720,14 @@ $zip.Dispose();
720
720
You can then verify the provenance of the package using [the GitHub CLI ](https :// cli.github.com/):
721
721
722
722
```bash
723
- gh attestation verify -- owner andrewlock " NetEscapades.AspNetCore.SecurityHeaders.1.0 .0.nupkg"
724
- gh attestation verify -- owner andrewlock " NetEscapades.AspNetCore.SecurityHeaders.TagHelpers.1.0 .0.nupkg"
723
+ gh attestation verify -- owner andrewlock " NetEscapades.AspNetCore.SecurityHeaders.1.1 .0.nupkg"
724
+ gh attestation verify -- owner andrewlock " NetEscapades.AspNetCore.SecurityHeaders.TagHelpers.1.1 .0.nupkg"
725
725
```
726
726
727
727
on success , this displays output similar to the following :
728
728
729
729
```bash
730
- Loaded digest sha256 :bf809ff0ed6a8a31131df4391b169e35ded44d4dfd97cc797123441683a95c9f for file :// NetEscapades.AspNetCore.SecurityHeaders.1.0 .0.nupkg
730
+ Loaded digest sha256 :bf809ff0ed6a8a31131df4391b169e35ded44d4dfd97cc797123441683a95c9f for file :// NetEscapades.AspNetCore.SecurityHeaders.1.1 .0.nupkg
731
731
Loaded 2 attestations from GitHub API
732
732
733
733
The following policy criteria will be enforced :
@@ -742,9 +742,9 @@ The following 1 attestation matched the policy criteria
742
742
743
743
- Attestation #1
744
744
- Build repo :.... . andrewlock / NetEscapades .AspNetCore .SecurityHeaders
745
- - Build workflow :. .github / workflows / BuildAndPack .yml @refs / tags / v1 .0 . 0
745
+ - Build workflow :. .github / workflows / BuildAndPack .yml @refs / tags / v1 .1 . 0
746
746
- Signer repo :.... andrewlock / NetEscapades .AspNetCore .SecurityHeaders
747
- - Signer workflow : .github / workflows / BuildAndPack .yml @refs / tags / v1 .0 . 0
747
+ - Signer workflow : .github / workflows / BuildAndPack .yml @refs / tags / v1 .1 . 0
748
748
```
749
749
750
750
SBOMs are provided in the GitHub release for the packages using the [CycloneDX standard ](https :// cyclonedx.org/).
@@ -753,8 +753,8 @@ with the `.signature.p7s` file removed. Assuming you have modified the _.nupkg_
753
753
you can verify the SBOM attestations by specifying the `-- predicate - type `:
754
754
755
755
```bash
756
- gh attestation verify -- owner andrewlock -- predicate - type https :// cyclonedx.org/bom "NetEscapades.AspNetCore.SecurityHeaders.1.0 .0.nupkg"
757
- gh attestation verify -- owner andrewlock -- predicate - type https :// cyclonedx.org/bom "NetEscapades.AspNetCore.SecurityHeaders.TagHelpers.1.0.0 .nupkg"
756
+ gh attestation verify -- owner andrewlock -- predicate - type https :// cyclonedx.org/bom "NetEscapades.AspNetCore.SecurityHeaders.1.1 .0.nupkg"
757
+ gh attestation verify -- owner andrewlock -- predicate - type https :// cyclonedx.org/bom "NetEscapades.AspNetCore.SecurityHeaders.TagHelpers.1.1.0`` .nupkg"
758
758
```
759
759
760
760
## Additional Resources
0 commit comments