Skip to content

capability-gate plugin bundle 0.1.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 19 Aug 19:56
· 556 commits to main since this release
plugin-v0.1.0
0d80a2b
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Hermes plugin bundle, version 0.1.0.

A signed release of the deterministic allowlist gate: capability_gate.py, plugin.yaml, allowlist.example.yaml, and a SHA256SUMS covering exactly those bytes. This is the plugin as it runs, not a snapshot of the repository, which is why the attestation subject is the bundle, not GitHub's source archive.

Build provenance is attested with SLSA through GitHub's native attestation, signed by the workflow that produced it. You do not have to take that on trust:

gh release download plugin-v0.1.0 --repo Steck43/capability-gate
gh attestation verify capability-gate-plugin-0.1.0.zip --repo Steck43/capability-gate

A clean copy exits 0. Alter a single byte, and the same command fails with no matching subject, which is the property worth having and the reason the check is published alongside the file.

sha256 8e3dc71d37e53a4d9e26ae5a75515e08520f4d9f9526a997a3e88588d9077584

Assets 3
Loading