v0.1.0

0.1.0 (2026-11-02)

⚠ BREAKING CHANGES

• layout v2. A folder must put its files under resources/ or raw/; the image paths objects/ and files/ become resources/, raw/ and configmaps/; --no-files and the Action's files input are removed; SOPS's default rule (encrypt every value) is refused for resources, because the identity must stay readable.

Features

• admit SOPS-sealed documents, add examples and a k3d mount test (467ef7e)
• align SOPS checks with getsops/sops, and add a pictures example (0089b7b)
• attach CLI binaries to releases, and show consumers a full CI setup (f859d07)
• build and push settings images, with a composite GitHub Action (2b60369)
• layout v2, a settings folder says what each file is (5bc760f)

Documentation

• plan, format v1, CLI, GitHub Action and the case for image volumes (2110251)

GitHub Action

- uses: ConfigButler/settings-image@v0.1.0
  with:
    path: configs/shop
    repository: ghcr.io/acme/shop-settings

CLI

Binaries for linux/amd64, linux/arm64 and darwin/arm64, with a checksums file:

curl -fsSLO https://github.com/ConfigButler/settings-image/releases/download/v0.1.0/settings-image_linux_amd64
curl -fsSL https://github.com/ConfigButler/settings-image/releases/download/v0.1.0/settings-image.sha256sums | sha256sum -c --ignore-missing

Verify the checksums file was signed by this repository's release workflow:

curl -fsSLO https://github.com/ConfigButler/settings-image/releases/download/v0.1.0/settings-image.sha256sums.sigstore.json
cosign verify-blob settings-image.sha256sums \
  --bundle settings-image.sha256sums.sigstore.json \
  --certificate-identity-regexp '^https://github.com/ConfigButler/settings-image/\.github/workflows/release\.yml@' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com

Once the repository is public, a binary also carries SLSA provenance:

gh attestation verify settings-image_linux_amd64 --repo ConfigButler/settings-image