Skip to content

ArtifactFlow v0.3.6

Choose a tag to compare

View all tags
@github-actions github-actions released this 14 Oct 07:34
· 26 commits to main since this release
v0.3.6
1dedc41
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Container image (pin by digest):

ghcr.io/gadsotek/artifactflow@sha256:5597813246f99443df5db216cfadacaae3381dda338a9e26c4c6d62a452e5f86

Dedicated PDF processor image (pin by digest):

ghcr.io/gadsotek/artifactflow-pdf-processor@sha256:dc842b2bf480e9cc42637b32e45e77cbd7f1df31ab027e100ddf6dc271b06838

Dedicated XLSX processor image (pin by digest):

ghcr.io/gadsotek/artifactflow-xlsx-processor@sha256:3c0a08747ce6d6052267484b72d3e2fd8b73798b5f4a1e371d555b44535004eb

Dedicated DOCX processor image (pin by digest):

ghcr.io/gadsotek/artifactflow-docx-processor@sha256:91ef6df66730fe53165963559176db6e30482ebc82f7539ea2715f4842a7090a

Verify build provenance and SBOM before running any image (needs the GitHub CLI):

gh attestation verify oci://ghcr.io/gadsotek/artifactflow@sha256:5597813246f99443df5db216cfadacaae3381dda338a9e26c4c6d62a452e5f86 --repo Gadsotek/artifactflow
gh attestation verify oci://ghcr.io/gadsotek/artifactflow-pdf-processor@sha256:dc842b2bf480e9cc42637b32e45e77cbd7f1df31ab027e100ddf6dc271b06838 --repo Gadsotek/artifactflow
gh attestation verify oci://ghcr.io/gadsotek/artifactflow-xlsx-processor@sha256:3c0a08747ce6d6052267484b72d3e2fd8b73798b5f4a1e371d555b44535004eb --repo Gadsotek/artifactflow
gh attestation verify oci://ghcr.io/gadsotek/artifactflow-docx-processor@sha256:91ef6df66730fe53165963559176db6e30482ebc82f7539ea2715f4842a7090a --repo Gadsotek/artifactflow

SLSA build provenance and CycloneDX SBOMs are keyless-signed (Sigstore), attested to all four image digests, pushed alongside them in the registry, and attached to this release.
All four images were scanned with Trivy (vuln, secret, misconfig; HIGH/CRITICAL gate) before publishing.
Self-hosting docs: docs/OPERATIONS.md. AGPL Section 13 applies to network use; see COMMERCIAL.md for the commercial path.

What's Changed

  • fix: patch FrankenPHP Go toolchain and HTTP/2 dependencies by @Gadsotek in #184
  • fix: bump the npm-minor-patch group across 1 directory with 5 updates by @dependabot[bot] in #183
  • fix: bump the composer-minor-patch group across 1 directory with 3 updates by @dependabot[bot] in #181
  • chore: prepare v0.3.6 release by @Gadsotek in #185

Full Changelog: v0.3.5...v0.3.6

Contributors

Gadsotek and dependabot
Assets 6
Loading