v2026.9.30

The first tagged version of Plak: what ran in production on 30 September 2026.

What Plak is in its initial version

• Publish a static site under /{group}/{site}/, with a live version, previews and earlier versions to look back at.
• Five access levels per site: public, secret link, SSO Rijk, group members and invitees by email address, with an override per preview.
• The Plak CLI (plak): log in with a device code, create groups and sites, link a repository and publish.
• The publiceer action for GitHub Actions and Forgejo Actions, publishing on an OIDC token without a secret.
• The Plak plugin for Claude Code: a preview by default, live only when asked.
• The admin in Dutch and English, login through SSO Rijk with back-channel logout, an append-only audit log with a hash chain.
• Deployment on ZAD from an image scanned by Trivy, with SBOM and provenance attestations.

Inside this tag: CLI 0.1.0, plugin 0.3.1 (CalVer from the next release on).

Container image

• plak: ghcr.io/digigilde/plak:be6f388a87727f152b855dd11b5d87ac243d7530, digest sha256:a5db1442adf28ac217ead524f3ba209b116747f28c784861ed83e50e39434d95

Verify where it was built: gh attestation verify oci://ghcr.io/digigilde/plak@sha256:a5db1442adf28ac217ead524f3ba209b116747f28c784861ed83e50e39434d95 -R DigiGilde/plak
Its SBOM (CycloneDX): the same command with --predicate-type https://cyclonedx.org/bom