v0.48.1

0.48.1 (2026-09-18)

Documentation

• bi-directional: document the workflow that exists, and record the inbound-trigger gap (#378) (2adf4b5)

Installation

Quick Install (plain manifests)

The CRDs ship as their own file and must be applied first — the bundle
contains a custom resource that cannot be created before its CRD exists:

kubectl apply -f https://github.com/ConfigButler/gitops-reverser/releases/download/v0.48.1/crds.yaml
kubectl apply -f https://github.com/ConfigButler/gitops-reverser/releases/download/v0.48.1/install.yaml

Helm Chart

helm install gitops-reverser oci://ghcr.io/configbutler/charts/gitops-reverser --version 0.48.1

Docker Images

This release is available as a Docker image:

docker pull ghcr.io/configbutler/gitops-reverser:0.48.1
docker pull ghcr.io/configbutler/gitops-reverser:latest

Platforms: linux/amd64, linux/arm64
Digest: sha256:b822d6e36a000f085bff709b51e41b5e2e9f1ff63af3e4a809b3b000cd39b8e4

Standalone analyzer

manifest-analyzer answers "which folders in this repository could become
GitTargets?" without a cluster. Binaries are attached for linux/amd64,
linux/arm64 and darwin/arm64, with a manifest-analyzer.sha256sums file:

curl -fsSLO https://github.com/ConfigButler/gitops-reverser/releases/download/v0.48.1/manifest-analyzer_linux_amd64
curl -fsSL https://github.com/ConfigButler/gitops-reverser/releases/download/v0.48.1/manifest-analyzer.sha256sums | sha256sum -c --ignore-missing

Verify this release

Images are signed with cosign (keyless) and carry SLSA build provenance
and an SPDX SBOM as registry attestations:

cosign verify \
  --certificate-identity-regexp '^https://github.com/ConfigButler/gitops-reverser/\.github/workflows/release\.yml@refs/heads/main$' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  ghcr.io/configbutler/gitops-reverser:0.48.1

gh attestation verify \
  oci://ghcr.io/configbutler/gitops-reverser:0.48.1 \
  --repo ConfigButler/gitops-reverser