Repository navigation
Machine Driver Bundle v0.16.5
Security rebuild with Go 1.27.3 and golang.org/x/net 0.60.0. Existing Docker Machine and provider interfaces remain unchanged. The retired Packet provider remains restricted to inspecting existing configurations and rollback; new resource creation is not enabled.
- Producer commit:
f8d9d86f896ca14a50f3788c2f6a200a1c3b6b21 - Protected-main build, tests, reproducibility, full runtime vulnerability gate and provenance
- Main CodeQL
- Archive SHA-256:
d9f33bcb16f478ceab44da4b185fb1fbadcab4f0f441f259c96a9805a854a28b - Docker Machine binary SHA-256:
9d379214de116542cb0e2b1a09c17409fd59fd2b0109428896d81de9cf9c0d31 - Packet driver binary SHA-256:
b3e5c71928fcebe1bb648f79ebbf38af9ad32d6f6dbb87587e1b92c6c331e100
The release retains raw and effective scan reports, CycloneDX SBOMs, exact OpenVEX evidence and source-mode Go reachability results. The sole module-level OpenPGP warning is not imported by either executable. All applicable runtime findings, available fixes and secret findings fail the gate. The archive's protected-main GitHub provenance was verified before publication.
The signed release tag is new. Existing tags and assets are not replaced. Server integration and deployment are separate operations.