Skip to content

v0.36.3

Choose a tag to compare

View all tags
@github-actions github-actions released this 22 Oct 21:05
v0.36.3
7879796
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

0.36.3 (2026-10-22)

Dependencies

Images

docker pull ghcr.io/controlvar/controlvar:core-0.36.3      # API, core profile
docker pull ghcr.io/controlvar/controlvar:full-0.36.3      # API, full profile
docker pull ghcr.io/controlvar/controlvar-web:core-0.36.3  # dashboard, core profile
docker pull ghcr.io/controlvar/controlvar-web:full-0.36.3  # dashboard, full profile

API images are built for linux/amd64; dashboard images for
linux/amd64. A host on any other architecture runs them under
emulation.

Verifying

Every image is signed with cosign keyless and carries an SPDX SBOM
attestation:

cosign verify ghcr.io/controlvar/controlvar:core-0.36.3 \
  --certificate-identity-regexp '^https://github\.com/Controlvar/controlvar/\.github/workflows/release\.yml@refs/(heads/main|tags/v[0-9].*)$' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com

cosign verify-attestation --type spdxjson ghcr.io/controlvar/controlvar:core-0.36.3 \
  --certificate-identity-regexp '^https://github\.com/Controlvar/controlvar/\.github/workflows/release\.yml@refs/(heads/main|tags/v[0-9].*)$' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com

The same SBOMs are attached below.

Assets 7
Loading