Skip to content

v0.37.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 27 Oct 11:38
v0.37.0
6036d11
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

0.37.0 (2026-10-27)

Features

  • installer: install and uninstall on AWS with one command (beta) (#1311) (facb778)

Documentation

  • self-hosting: the beta AWS installer page (#1384) (21a3f5b)

Images

docker pull ghcr.io/controlvar/controlvar:core-0.37.0      # API, core profile
docker pull ghcr.io/controlvar/controlvar:full-0.37.0      # API, full profile
docker pull ghcr.io/controlvar/controlvar-web:core-0.37.0  # dashboard, core profile
docker pull ghcr.io/controlvar/controlvar-web:full-0.37.0  # dashboard, full profile

API images are built for linux/amd64; dashboard images for
linux/amd64. A host on any other architecture runs them under
emulation.

Verifying

Every image is signed with cosign keyless and carries an SPDX SBOM
attestation:

cosign verify ghcr.io/controlvar/controlvar:core-0.37.0 \
  --certificate-identity-regexp '^https://github\.com/Controlvar/controlvar/\.github/workflows/release\.yml@refs/(heads/main|tags/v[0-9].*)$' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com

cosign verify-attestation --type spdxjson ghcr.io/controlvar/controlvar:core-0.37.0 \
  --certificate-identity-regexp '^https://github\.com/Controlvar/controlvar/\.github/workflows/release\.yml@refs/(heads/main|tags/v[0-9].*)$' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com

The same SBOMs are attached below.

Assets 7
Loading