v0.1.1

SealKeeper v0.1.1

Try it in 5 seconds (eval mode)

docker run --rm -p 8443:8443 -e SK_MODE=eval ghcr.io/sched75-org/sealkeeper:v0.1.1

Opens on http://localhost:8443/ with an auto-generated master secret,
SQLite storage and a bootstrap admin password printed to the logs
(FR-H.11..19).

Production deployments

1. Docker Compose — download sealkeeper-deploy-0.1.1.tar.gz
   below, fill in .env, then docker compose up -d.
2. Kubernetes / Helm — helm install sealkeeper helm/sealkeeper-0.1.1.tgz --set secret.masterSecret="$(openssl rand -base64 32)"
   (or point secret.existingSecret at a Secret managed out of band).

What's changed

Security fixes, upgrade notes and acknowledgements:
CHANGELOG.md.

Artifacts

• Binaries: linux/amd64, linux/arm64, darwin/amd64, darwin/arm64
• OCI image: ghcr.io/sched75-org/sealkeeper:v0.1.1 (digest sha256:e962b47689ebfd142637ecf22c8a9855eb45021c3794ee59e5e3057d09c541ce), signed with cosign keyless (Rekor)
• SBOM CycloneDX 1.5 attached for binaries and image
• SLSA level 2 provenance attestation (verifiable via gh attestation verify)
• Helm chart sealkeeper-0.1.1.tgz
• Deployment bundle (sealkeeper-deploy-0.1.1.tar.gz / .zip)

Verifying

See docs/security/verification.md for instructions on verifying GPG
signatures (SHA256SUMS), cosign image signatures and SLSA provenance.
Release checksums and binary SBOMs are attached below; in the
deployment bundle they sit next to the binaries in binaries/.

v0.1.0

SealKeeper v0.1.0

Try it in 5 seconds (eval mode)

docker run --rm -p 8443:8443 -e SK_MODE=eval ghcr.io/sched75-org/sealkeeper:v0.1.0

Opens on http://localhost:8443/ with an auto-generated master secret,
SQLite storage and a bootstrap admin password printed to the logs
(FR-H.11..19).

Production deployments

1. Docker Compose — download sealkeeper-deploy-0.1.0.tar.gz
   below, fill in .env, then docker compose up -d.
2. Kubernetes / Helm — helm install sealkeeper helm/sealkeeper-0.1.0.tgz --set secret.masterSecret="$(openssl rand -base64 32)"
   (or point secret.existingSecret at a Secret managed out of band).

What's changed

Security fixes, upgrade notes and acknowledgements:
CHANGELOG.md.

Artifacts

• Binaries: linux/amd64, linux/arm64, darwin/amd64, darwin/arm64
• OCI image: ghcr.io/sched75-org/sealkeeper:v0.1.0 (digest sha256:0cb1b22c742f4c0b8c9fb6d41055c4dbd0569010d1febae836813fd249b061d2), signed with cosign keyless (Rekor)
• SBOM CycloneDX 1.5 attached for binaries and image
• SLSA level 2 provenance attestation (verifiable via gh attestation verify)
• Helm chart sealkeeper-0.1.0.tgz
• Deployment bundle (sealkeeper-deploy-0.1.0.tar.gz / .zip)

Verifying

See docs/security/verification.md for instructions on verifying GPG
signatures (SHA256SUMS), cosign image signatures and SLSA provenance.
Release checksums and binary SBOMs are attached below; in the
deployment bundle they sit next to the binaries in binaries/.