v0.2.0

Container image

Pull by tag

docker pull ghcr.io/rynaro/magicite:0.2.0

Pull by digest (recommended — immutable pin)

docker pull ghcr.io/rynaro/magicite@sha256:486f3c510ad48d7e6a3ca32dfa2e40ba29b06e3572f13da9264e088834c87b67

Multi-arch: linux/amd64 + linux/arm64

The house hardening invocation (AC-026)

docker run --rm -i \
    --user "$(id -u):$(id -g)" \
    --cap-drop ALL --security-opt no-new-privileges \
    -v "$PWD":"$PWD":z -w "$PWD" \
    ghcr.io/rynaro/magicite@sha256:486f3c510ad48d7e6a3ca32dfa2e40ba29b06e3572f13da9264e088834c87b67 \
    serve --project-root "$PWD"

Supply-chain verification

Verify the cosign keyless signature:

cosign verify \
  --certificate-identity-regexp "https://github.com/Rynaro/magicite/.github/workflows/release.yml@.*" \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com" \
  ghcr.io/rynaro/magicite@sha256:486f3c510ad48d7e6a3ca32dfa2e40ba29b06e3572f13da9264e088834c87b67

Verify SBOM + provenance attestations:

gh attestation verify oci://ghcr.io/rynaro/magicite@sha256:486f3c510ad48d7e6a3ca32dfa2e40ba29b06e3572f13da9264e088834c87b67 \
  --owner Rynaro

Digest for pinning

ghcr.io/rynaro/magicite@sha256:486f3c510ad48d7e6a3ca32dfa2e40ba29b06e3572f13da9264e088834c87b67

What's Changed

• Dogfood Magicite: first-party engram registry, codebase tranche, and a self-contained .magicite/ by @Rynaro in #1

New Contributors

• @Rynaro made their first contribution in #1

Full Changelog: v0.1.0...v0.2.0