What changed, and why it matters
This commit fixes two typos in the user documentation for verifying a downloaded Krux installer. The instructions previously told users to run commands with an extra '.txt' in the filename, which would have caused the commands to fail because the actual signature and checksum files do not include '.txt'. This is a documentation-only correction with no code changes.
No security action required. The change is a straightforward documentation typo fix. Reviewers may optionally confirm that the corrected filenames match the actual release artifacts.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The diff updates two shell command examples in docs/getting-started/installing/from-gui/verify-download.en.md. It changes ‘gpg –verify {{latest_installer_sha}}.txt.sig’ to ‘gpg –verify {{latest_installer_sha}}.sig’ and ‘sha256sum –check {{latest_installer_sha}}.txt’ to ‘sha256sum –check {{latest_installer_sha}}’. These changes align the documented filenames with the actual release artifact names. No source code, build scripts, or cryptographic logic was modified.
Changed components
docs/getting-started/installing/from-gui/verify-download.en.mdInspect captured patch +2 / −2
diff --git a/docs/getting-started/installing/from-gui/verify-download.en.md b/docs/getting-started/installing/from-gui/verify-download.en.md
index e361645..68d2f9e 100644
--- a/docs/getting-started/installing/from-gui/verify-download.en.md
+++ b/docs/getting-started/installing/from-gui/verify-download.en.md
@@ -19,7 +19,7 @@ gpg --keyserver {{latest_installer_keyserver}} --recv-keys {{latest_installer_ke
Then, to verify yourself, run this:
```bash
-gpg --verify {{latest_installer_sha}}.txt.sig
+gpg --verify {{latest_installer_sha}}.sig
```
**Windows**
@@ -40,7 +40,7 @@ is authentic, we can proceed with the integrity check in your `bash`/`zsh` termi
**Linux / MacOS**
```bash
-sha256sum --check {{latest_installer_sha}}.txt
+sha256sum --check {{latest_installer_sha}}
```
**Windows**
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.