Replace your `curl | sh` installers
GNUPGHOME
environment variableThanks to @bamarni and @dennisdegreef!
#1: pipethis
learned to read scripts piped from STDIN
, like a boss. Or a rapper.
pipethis
learned to verify signatures on clearsigned scripts (like hashbang.sh).pipethis
learned to look for script authors in the local GnuPG public keyring with the --lookup-with local
option.PIPETHIS_SIG
is replaced by a --signature
command-line flag. The existing default behavior (looking for the PGP detached signature at <script location>.sig
) is unchanged.First release, wahoo