See the changelog for the list of changes in this release.
You can use the following command to check your downloaded assets:
sha256sum --ignore-missing --check sha256sum.txt
You can use one of the following commands to verify a downloaded asset:
gh attestation verify --repo=google/wasefire ASSET_PATH
gh attestation verify --owner=google --bundle=attestation.intoto.jsonl ASSET_PATH