v0.2.2

0.2.2 (2026-11-03)

Bug Fixes

• admit a SOPS file whose only values are empty (c1d749f)

Documentation

• compare settings-image with every folder-to-registry tool (020132c)
• explain digests and provenance, add imgpkg as prior art (93bf52a)

GitHub Action

- uses: ConfigButler/settings-image@v0.2.2
  with:
    path: configs/shop
    repository: ghcr.io/acme/shop-settings

CLI

Binaries for linux/amd64, linux/arm64 and darwin/arm64, with a checksums file:

curl -fsSLO https://github.com/ConfigButler/settings-image/releases/download/v0.2.2/settings-image_linux_amd64
curl -fsSL https://github.com/ConfigButler/settings-image/releases/download/v0.2.2/settings-image.sha256sums | sha256sum -c --ignore-missing

Verify the checksums file was signed by this repository's release workflow:

curl -fsSLO https://github.com/ConfigButler/settings-image/releases/download/v0.2.2/settings-image.sha256sums.sigstore.json
cosign verify-blob settings-image.sha256sums \
  --bundle settings-image.sha256sums.sigstore.json \
  --certificate-identity-regexp '^https://github.com/ConfigButler/settings-image/\.github/workflows/release\.yml@' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com

Each binary also carries SLSA provenance:

gh attestation verify settings-image_linux_amd64 --repo ConfigButler/settings-image