This major release optimizes and refactors the log formatting and pre-verification checks within the admission control loop, dropping noisy legacy warning strings in favor of clean, deterministic diagnostic messages.
🚀 Features & Enhancements
- Issue: Log Message Simplification (#46): Removed verbose, repetitive error string compounding. Failed signature verifications now generate clean, direct messages standardizing on the underlying error and associated image metadata (
error [err] and image information [image]). - PR: External Image Pre-Filtering (#47): Refactored the core validation engine to evaluate
filteredExternalImagesbefore hitting the failed verification handler. This prevents misleading, noisy warnings (such as auditing statefulsets for unvalidated external images) from polluting cluster logs.
🛡️ Self-Verification
Verify the integrity of this major release using the Sigstore Keyless flow:
cosign verify ghcr.io/betorvs/dvorah:0.7.0 \
--certificate-identity-regexp="^https://github.com/betorvs/dvorah/.github/workflows/release.yaml@refs/tags/v7.0.0$" \
--certificate-oidc-issuer=https://token.actions.githubusercontent.com