v0.0.2

WebSec0 v0.0.2

Multi-arch binaries and a distroless Docker image. The binary embeds
the Astro frontend; running ./websec0 exposes the UI on :8080.

Changelog

Features

• c2314b9: feat(frontend): configurable /.well-known/ overlay directory (@JoshuaMart)
• 6836b6a: feat(frontend): generalise overlay to /.well-known/ + root statics, ship robots.txt (@JoshuaMart)

Documentation

• ec31a5c: docs(readme): lead self-host with the published GHCR image (@JoshuaMart)
• 849893a: docs(web): point the landing curl snippet at the public instance (@JoshuaMart)

Other changes

• c7b802c: refactor(custom): drive robots/security check parseability off Content-Type (@JoshuaMart)

---

Docker image — ghcr.io/joshuamart/websec0:v0.0.2 (linux/amd64 + linux/arm64).

Verifying release artefacts — the checksums.txt file and the
Docker manifest are signed with cosign keyless via Sigstore. To
verify the checksum signature:

cosign verify-blob \
  --certificate-identity-regexp 'https://github.com/JoshuaMart/WebSec0/.github/workflows/release.yml@refs/tags/' \
  --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' \
  --signature checksums.txt.sig \
  checksums.txt