Skip to content

v0.1.2

Choose a tag to compare

View all tags
@github-actions github-actions released this 22 Sep 01:24
· 71 commits to main since this release
v0.1.2
This tag was signed with the committer’s verified signature. The key has expired.
aramase Anish Ramasekar
GPG key ID: E96F745A34A409C2
Expired
Verified
Learn about vigilant mode.
adb5d10
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

agentsessions v0.1.2

Pre-1.0: the wire contract and the Go SPI may both change. agentsessions.v1 is a proto
namespace, not a stability promise.

There is no authentication, authorization, or transport security. Do not expose a host to an
untrusted network or treat it as multi-tenant. See docs/security.md.

Changelog

Build and CI

  • 1601530 build(deps): bump the go-dependencies group with 2 updates (#54)
  • adb5d10 build: install ko directly instead of via setup-ko (#62)
  • c855f18 build: publish images under their documented names (#60)
  • f5e3cc7 build: stop setup-ko from overriding the image repositories (#61)

Verify an artifact

Every archive is checksummed, and each carries an SBOM alongside it:

sha256sum -c checksums.txt --ignore-missing

Public releases also carry signed build provenance, which ties an archive to the workflow,
commit, and runner that produced it:

gh attestation verify <file> --repo aramase/agentsessions

Container images

ghcr.io/aramase/agentsessions/agentsessionsd:v0.1.2
ghcr.io/aramase/agentsessions/harnessnode:v0.1.2

Multi-arch (amd64 and arm64), built with ko from the tagged source, each with an SBOM pushed
alongside it. agentsessionsd runs as uid 65532; give its journal path a writable volume.

Assets 11
Loading