release-metadata

Overview ¶

Command release-metadata creates the small signed manifest consumed by the updater. The signing key is read from a file descriptor environment path, never an argument or log field.