Skip to content

ArtifactFlow v0.3.3

Choose a tag to compare

@github-actions github-actions released this 22 Sep 16:28
· 77 commits to main since this release
0beb5f1

Container image (pin by digest):

ghcr.io/gadsotek/artifactflow@sha256:20732807e3f836412a55b58368633be449eb7e262ebb1a047a3b28ba685790b0

Dedicated PDF processor image (pin by digest):

ghcr.io/gadsotek/artifactflow-pdf-processor@sha256:9171dd755055bc969f016e00c89046becefc27c6f19e9e67bf3b4aa75ddffcf5

Dedicated XLSX processor image (pin by digest):

ghcr.io/gadsotek/artifactflow-xlsx-processor@sha256:cf90ecb93ccb4e15ce8638939e5aa5836b2aae557302d393397f92de84accb38

Dedicated DOCX processor image (pin by digest):

ghcr.io/gadsotek/artifactflow-docx-processor@sha256:5b02d04c2aafec7ed76485bb36f1ded618f4137d12f9000a7fa828af3ed73ba3

Verify build provenance and SBOM before running any image (needs the GitHub CLI):

gh attestation verify oci://ghcr.io/gadsotek/artifactflow@sha256:20732807e3f836412a55b58368633be449eb7e262ebb1a047a3b28ba685790b0 --repo Gadsotek/artifactflow
gh attestation verify oci://ghcr.io/gadsotek/artifactflow-pdf-processor@sha256:9171dd755055bc969f016e00c89046becefc27c6f19e9e67bf3b4aa75ddffcf5 --repo Gadsotek/artifactflow
gh attestation verify oci://ghcr.io/gadsotek/artifactflow-xlsx-processor@sha256:cf90ecb93ccb4e15ce8638939e5aa5836b2aae557302d393397f92de84accb38 --repo Gadsotek/artifactflow
gh attestation verify oci://ghcr.io/gadsotek/artifactflow-docx-processor@sha256:5b02d04c2aafec7ed76485bb36f1ded618f4137d12f9000a7fa828af3ed73ba3 --repo Gadsotek/artifactflow

SLSA build provenance and CycloneDX SBOMs are keyless-signed (Sigstore), attested to all four image digests, pushed alongside them in the registry, and attached to this release.
All four images were scanned with Trivy (vuln, secret, misconfig; HIGH/CRITICAL gate) before publishing.
Self-hosting docs: docs/OPERATIONS.md. AGPL Section 13 applies to network use; see COMMERCIAL.md for the commercial path.

What's Changed

Full Changelog: v0.3.2...v0.3.3