v4.15.3

Changelog

• 60cf82f Do not panic on a VPA that has no targetRef (#876)
• 68af75d Managed by Terraform

You can verify the signatures of both the checksums.txt file and the published docker images using cosign.

cosign verify-blob checksums.txt --bundle=checksums.txt.sigstore.json --key https://artifacts.fairwinds.com/cosign-p256.pub

cosign verify us-docker.pkg.dev/fairwinds-ops/oss/goldilocks:v4.15.3 --key https://artifacts.fairwinds.com/cosign-p256.pub