A single signed FreeBSD pkg repository bundling alphyriver's OPNsense plugins. Pin the key once — every install and upgrade is verified.
Pin the repository config and its signing key on the firewall (run as root).
# repo config + signing public key
fetch -o /usr/local/etc/pkg/repos/alphyriver.conf https://alphyriver.github.io/opnsense-plugins/plugins.conf
fetch -o /usr/local/etc/pkg/keys/alphyriver.pub https://alphyriver.github.io/opnsense-plugins/pkg-repo.pubRefresh the catalogue and install. Later upgrades are just pkg upgrade.
pkg update # verifies the catalogue signature against alphyriver.pub
pkg install os-oidc os-truenas-api-client