Skip to content

v0.1.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 15 Aug 18:14
· 30 commits to main since this release
v0.1.0
99da5c2

Container image

Pull by tag

docker pull ghcr.io/rynaro/magicite:0.1.0

Pull by digest (recommended — immutable pin)

docker pull ghcr.io/rynaro/magicite@sha256:d4de4eacbadea6f7e8fa73506dceae8e3d465088a2590c3d892deb096e03dc34

Multi-arch: linux/amd64 + linux/arm64

The house hardening invocation (AC-026)

docker run --rm -i \
    --user "$(id -u):$(id -g)" \
    --cap-drop ALL --security-opt no-new-privileges \
    -v "$PWD":"$PWD":z -w "$PWD" \
    ghcr.io/rynaro/magicite@sha256:d4de4eacbadea6f7e8fa73506dceae8e3d465088a2590c3d892deb096e03dc34 \
    serve --project-root "$PWD"

Supply-chain verification

Verify the cosign keyless signature:

cosign verify \
  --certificate-identity-regexp "https://github.com/Rynaro/magicite/.github/workflows/release.yml@.*" \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com" \
  ghcr.io/rynaro/magicite@sha256:d4de4eacbadea6f7e8fa73506dceae8e3d465088a2590c3d892deb096e03dc34

Verify SBOM + provenance attestations:

gh attestation verify oci://ghcr.io/rynaro/magicite@sha256:d4de4eacbadea6f7e8fa73506dceae8e3d465088a2590c3d892deb096e03dc34 \
  --owner Rynaro

Digest for pinning

ghcr.io/rynaro/magicite@sha256:d4de4eacbadea6f7e8fa73506dceae8e3d465088a2590c3d892deb096e03dc34

Full Changelog: https://github.com/Rynaro/magicite/commits/v0.1.0

Assets 2
Loading