New Tuist CLI releases include signed Packslip manifests that mise can use to authenticate the publisher and verify downloads. Before installing Tuist, mise verifies the GitHub release-workflow identity and checks the selected archive against its signed digest.
Packslip support is built into mise 2026.9.2 and newer; no separate Packslip CLI or experimental setting is required. Opt in with:
mise use packslip:github.com/tuist/tuist@latest
Use the explicit packslip: identifier for manifest verification. The mise use tuist shorthand currently uses mise's Aqua backend; it does not automatically switch to Packslip when the manifest is published.
Each new canary, release candidate, stable release, and backport includes a packslip.sigstore.json file on its GitHub release. The manifest covers the universal macOS archive and the Linux x86_64 and ARM64 archives, so mise can select the download for your platform.
Existing installation methods continue to work. Previously published releases are not retroactively signed.